Add permission guard and only allow provider admin to visit billing page for provider portal users (#18639)

2026-02-19 19:04:01 +00:00 · 2026-02-05 10:31:21 -05:00
parent 70c321094e
commit 9462184e17
1 changed files with 3 additions and 1 deletions
--- a/bitwarden_license/bit-web/src/app/admin-console/providers/providers-routing.module.ts
+++ b/bitwarden_license/bit-web/src/app/admin-console/providers/providers-routing.module.ts
@@ -123,7 +123,9 @@ const routes: Routes = [
          },
          {
            path: "billing",
-            canActivate: [providerPermissionsGuard()],
+            canActivate: [
+              providerPermissionsGuard((provider: Provider) => provider.isProviderAdmin),
+            ],
            children: [
              {
                path: "",