This is an automated email from the ASF dual-hosted git repository. Aman-Mittal pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/fineract-backoffice-ui.git
commit f49c276ce1e7d8351fbc20ca6c6ba54ccc4d03b3 Merge: b6cc8f2f 7bb71137 Author: Aman Mittal <[email protected]> AuthorDate: Sat Oct 3 23:50:31 2026 +0530 Merge pull request #695 from Aman-Mittal/fix/route-permissions-per-command fix(rbac): gate every control on the permission the platform actually enforces .github/scripts/post-e2e-comments.js | 55 +- .github/workflows/ci.yml | 6 + .github/workflows/pr-comments.yml | 57 +- DOCS/CI_CHECKS.md | 27 +- e2e/loan-flows-non-admin-roles.spec.ts | 372 +++-------- e2e/rbac-dead-end-controls.spec.ts | 26 +- e2e/savings-flows-non-admin-roles.spec.ts | 361 ++++++++++ e2e/utils/ui-rbac.ts | 283 ++++++++ package.json | 2 + playwright.config.ts | 1 + scripts/check-permission-codes.mjs | 168 +++++ scripts/check-route-permissions.mjs | 120 +++- scripts/fetch-permission-codes.sh | 51 ++ scripts/permission-codes.json | 738 +++++++++++++++++++++ scripts/pr-comment-actions.test.mjs | 237 ++++++- scripts/snapshot-permission-codes.mjs | 137 ++++ src/app/core/guards/command-permissions.test.ts | 115 ++++ src/app/core/guards/command-permissions.ts | 150 +++++ src/app/core/guards/permission.guard.test.ts | 101 ++- src/app/core/guards/permission.guard.ts | 30 +- src/app/core/services/navigation-config.service.ts | 3 +- src/app/features/clients/client-view.component.ts | 4 +- src/app/features/loans/loan-view.component.ts | 17 +- src/app/features/loans/loans.routes.ts | 6 +- .../office-transactions-list.component.test.ts | 122 ++++ .../features/organization/organization.routes.ts | 22 +- src/app/features/products/products.routes.ts | 7 +- .../savings-account-transaction-form.component.ts | 14 + .../products/savings-account-view.component.ts | 16 +- 29 files changed, 2914 insertions(+), 334 deletions(-)
