Add permission guard and only allow provider admin to visit billing page for provider portal users (#18639)

2026-07-01 21:10:49 +08:00 · 2026-02-05 10:31:21 -05:00 · 2026-02-05 10:31:21 -05:00 · 3fb31fd040
commit 3fb31fd040
parent 7c6d98b50e
1 changed files with 3 additions and 1 deletions
--- a/bitwarden_license/bit-web/src/app/admin-console/providers/providers-routing.module.ts
+++ b/bitwarden_license/bit-web/src/app/admin-console/providers/providers-routing.module.ts
@ -123,7 +123,9 @@ const routes: Routes = [
          },
          {
            path: "billing",
-            canActivate: [providerPermissionsGuard()],
+            canActivate: [
+              providerPermissionsGuard((provider: Provider) => provider.isProviderAdmin),
+            ],
            children: [
              {
                path: "",