Add role control

APP/src/app/app.routes.ts

@@ -3,7 +3,9 @@ import { DashboardComponent } from './portals/user-portal/pages/dashboard/dashbo
 import { LoginPage } from './features/login-page/login-page';
 import { UserPortalComponent } from './portals/user-portal/user-portal.component';
 import { AuthGuard } from './core/guards/auth.guard';
-import { RoleGuard } from './core/guards/role.guard';
+import { PermissionGuard } from './core/guards/permission.guard';
+import { PermissionModules } from './core/models/permission.model';
+import { PermissionsPageComponent } from './features/permissions/pages/permissions-page/permissions-page.component';
 import { MembersPageComponent } from './features/members/pages/members-page/members-page.component';
 import { UsersPageComponent } from './features/users/pages/users-page/users-page.component';
 import { GivingCategoriesPageComponent } from './features/giving/pages/giving-categories-page/giving-categories-page.component';
@@ -38,73 +40,84 @@ export const routes: Routes = [
         children: [
             { path: '',                  redirectTo: 'dashboard', pathMatch: 'full' },
             { path: 'dashboard',         component: DashboardComponent   },
-            { path: 'admin/members',     component: MembersPageComponent },
+            {
+                path: 'admin/members',
+                component: MembersPageComponent,
+                canActivate: [PermissionGuard],
+                data: { permission: { module: PermissionModules.Members, action: 'read' } },
+            },
             {
                 path: 'admin/users',
                 component: UsersPageComponent,
-                canActivate: [RoleGuard],
-                data: { roles: ['super_admin'] },
+                canActivate: [PermissionGuard],
+                data: { permission: { module: PermissionModules.Users, action: 'read' } },
+            },
+            {
+                path: 'admin/permissions',
+                component: PermissionsPageComponent,
+                canActivate: [PermissionGuard],
+                data: { permission: { module: PermissionModules.Permissions, action: 'read' } },
             },
             {
                 path: 'finance/dashboard',
                 component: FinanceDashboardPageComponent,
-                canActivate: [RoleGuard],
-                data: { roles: ['finance', 'super_admin'] },
+                canActivate: [PermissionGuard],
+                data: { permission: { module: PermissionModules.FinanceDashboard, action: 'read' } },
             },
             {
                 path: 'finance/giving-categories',
                 component: GivingCategoriesPageComponent,
-                canActivate: [RoleGuard],
-                data: { roles: ['finance', 'super_admin'] },
+                canActivate: [PermissionGuard],
+                data: { permission: { module: PermissionModules.GivingCategories, action: 'read' } },
             },
             {
                 path: 'finance/givings',
                 component: GivingsPageComponent,
-                canActivate: [RoleGuard],
-                data: { roles: ['finance', 'super_admin'] },
+                canActivate: [PermissionGuard],
+                data: { permission: { module: PermissionModules.Givings, action: 'read' } },
             },
             {
                 path: 'finance/offering-session',
                 component: OfferingSessionPageComponent,
-                canActivate: [RoleGuard],
-                data: { roles: ['finance', 'super_admin'] },
+                canActivate: [PermissionGuard],
+                data: { permission: { module: PermissionModules.OfferingSessions, action: 'read' } },
             },
             { path: 'reimbursements', component: MyReimbursementsPageComponent },
             {
                 path: 'finance/expenses',
                 component: ExpensesPageComponent,
-                canActivate: [RoleGuard],
-                data: { roles: ['finance', 'super_admin'] },
+                canActivate: [PermissionGuard],
+                data: { permission: { module: PermissionModules.Expenses, action: 'read' } },
             },
             {
                 path: 'finance/expense-categories',
                 component: ExpenseCategoriesPageComponent,
-                canActivate: [RoleGuard],
-                data: { roles: ['finance', 'super_admin'] },
+                canActivate: [PermissionGuard],
+                data: { permission: { module: PermissionModules.ExpenseCategories, action: 'read' } },
             },
             {
                 path: 'finance/monthly-statement',
                 component: MonthlyStatementPageComponent,
-                canActivate: [RoleGuard],
-                data: { roles: ['finance', 'super_admin'] },
+                canActivate: [PermissionGuard],
+                data: { permission: { module: PermissionModules.MonthlyStatements, action: 'read' } },
             },
             {
                 path: 'finance/disbursements',
                 component: DisbursementPageComponent,
-                canActivate: [RoleGuard],
-                data: { roles: ['finance', 'super_admin'] },
+                canActivate: [PermissionGuard],
+                data: { permission: { module: PermissionModules.Disbursements, action: 'read' } },
             },
             {
                 path: 'finance/check-register',
                 component: CheckRegisterPageComponent,
-                canActivate: [RoleGuard],
-                data: { roles: ['finance', 'super_admin'] },
+                canActivate: [PermissionGuard],
+                data: { permission: { module: PermissionModules.Disbursements, action: 'read' } },
             },
             {
                 path: 'finance/church-profile',
                 component: ChurchProfilePageComponent,
-                canActivate: [RoleGuard],
-                data: { roles: ['finance', 'super_admin'] },
+                canActivate: [PermissionGuard],
+                data: { permission: { module: PermissionModules.ChurchProfile, action: 'read' } },
             },
         ]
     },