Added permissions to control access to API and manage API tokens

This commit is contained in:
Jan Böhmer 2023-08-26 22:57:50 +02:00
parent be14fe548c
commit 8fe3f4cf5c
7 changed files with 60 additions and 26 deletions

View file

@ -55,7 +55,9 @@
</table>
{% endif %}
<a href="{{ path('user_api_token_create') }}" class="btn btn-success" ><i class="fas fa-plus-square fa-fw"></i> {% trans %}api_token.create_new{% endtrans %}</a>
<a href="{{ path('user_api_token_create') }}" class="btn btn-success" {% if not is_granted('@api.manage_tokens') %}disabled="disabled"{% endif %}>
<i class="fas fa-plus-square fa-fw"></i> {% trans %}api_token.create_new{% endtrans %}
</a>
</div>
</div>

View file

@ -77,5 +77,7 @@
</div>
</div>
{% include "users/_api_tokens.html.twig" %}
{% if is_granted("@api.access_api") %}
{% include "users/_api_tokens.html.twig" %}
{% endif %}
{% endblock %}