Add permission guard and only allow provider admin to visit billing page for provider portal users (#18639)

2026-02-07 20:24:01 +00:00 · 2026-02-05 10:31:21 -05:00
parent 7c6d98b50e
commit 3fb31fd040
1 changed files with 3 additions and 1 deletions
--- a/bitwarden_license/bit-web/src/app/admin-console/providers/providers-routing.module.ts
+++ b/bitwarden_license/bit-web/src/app/admin-console/providers/providers-routing.module.ts
@@ -123,7 +123,9 @@ const routes: Routes = [
          },
          {
            path: "billing",
-            canActivate: [providerPermissionsGuard()],
+            canActivate: [
+              providerPermissionsGuard((provider: Provider) => provider.isProviderAdmin),
+            ],
            children: [
              {
                path: "",