From afc58d566c70f61c152181690685b42954921967 Mon Sep 17 00:00:00 2001
From: tanshu <git@tanshu.com>
Date: Sun, 13 Dec 2020 13:19:42 +0530
Subject: [PATCH] Fix: Permissions for header-footer. The persission Owner is
 only for Settle Option and Header / Footer

---
 barker/barker/routers/header_footer.py                       | 4 ++--
 bookie/src/app/header-footer/header-footer-routing.module.ts | 4 ++--
 bookie/src/app/home/home.component.html                      | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/barker/barker/routers/header_footer.py b/barker/barker/routers/header_footer.py
index d8a6a65..3a40ba1 100644
--- a/barker/barker/routers/header_footer.py
+++ b/barker/barker/routers/header_footer.py
@@ -25,7 +25,7 @@ def get_db():
 @router.get("")
 def get(
     db: Session = Depends(get_db),
-    user: UserToken = Security(get_user, scopes=["products"]),
+    user: UserToken = Security(get_user, scopes=["owner"]),
 ):
     return [
         {"id": item.id, "name": item.name, "text": item.data["Text"]}
@@ -37,7 +37,7 @@ def get(
 def save(
     data: schemas.HeaderFooter,
     db: Session = Depends(get_db),
-    user: UserToken = Security(get_user, scopes=["products"]),
+    user: UserToken = Security(get_user, scopes=["owner"]),
 ):
     try:
         item: DbSetting = db.query(DbSetting).filter(DbSetting.id == data.id_, DbSetting.name == data.name).first()
diff --git a/bookie/src/app/header-footer/header-footer-routing.module.ts b/bookie/src/app/header-footer/header-footer-routing.module.ts
index 27b823a..9a5d2e9 100644
--- a/bookie/src/app/header-footer/header-footer-routing.module.ts
+++ b/bookie/src/app/header-footer/header-footer-routing.module.ts
@@ -13,7 +13,7 @@ const headerRoutes: Routes = [
     component: HeaderFooterComponent,
     canActivate: [AuthGuard],
     data: {
-      permission: 'Products',
+      permission: 'Owner',
     },
     resolve: {
       list: HeaderFooterResolver,
@@ -24,7 +24,7 @@ const headerRoutes: Routes = [
     component: HeaderFooterComponent,
     canActivate: [AuthGuard],
     data: {
-      permission: 'Products',
+      permission: 'Owner',
     },
     resolve: {
       list: HeaderFooterResolver,
diff --git a/bookie/src/app/home/home.component.html b/bookie/src/app/home/home.component.html
index 1f3381e..51330e0 100644
--- a/bookie/src/app/home/home.component.html
+++ b/bookie/src/app/home/home.component.html
@@ -227,7 +227,7 @@
     fxLayout="column"
     class="square-button"
     matRipple
-    *ngIf="auth.allowed('products')"
+    *ngIf="auth.allowed('owner')"
     [routerLink]="['/', 'header-footer']"
   >
     <h3 class="item-name">Header / Footer</h3>