From 0022d7d0b0ddafa690ddfa00545525aab74f085a Mon Sep 17 00:00:00 2001
From: Benjamin <therealbenpai@gmail.com>
Date: Fri, 31 May 2024 13:06:42 -0400
Subject: [PATCH] (admin) add community permission

---
 routes/adminProfiles.vue | 2 +-
 routes/adminUsers.vue    | 2 +-
 server/routes/admin.js   | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/routes/adminProfiles.vue b/routes/adminProfiles.vue
index ad35ac488..50887addd 100644
--- a/routes/adminProfiles.vue
+++ b/routes/adminProfiles.vue
@@ -1,6 +1,6 @@
 <template>
     <Page>
-        <NotFound v-if="!$isGranted('users')" />
+        <NotFound v-if="!$isGranted('users') && !$isGranted('community')" />
         <div v-else>
             <p>
                 <nuxt-link to="/admin">
diff --git a/routes/adminUsers.vue b/routes/adminUsers.vue
index ca68a4390..efae36354 100644
--- a/routes/adminUsers.vue
+++ b/routes/adminUsers.vue
@@ -1,6 +1,6 @@
 <template>
     <Page>
-        <NotFound v-if="!$isGranted('users')" />
+        <NotFound v-if="!$isGranted('users') && !isGranted('community')" />
         <div v-else>
             <p>
                 <nuxt-link to="/admin">
diff --git a/server/routes/admin.js b/server/routes/admin.js
index a3b46afb2..d0e7a46e2 100644
--- a/server/routes/admin.js
+++ b/server/routes/admin.js
@@ -78,7 +78,7 @@ router.get('/admin/list/footer', handleErrorAsync(async (req, res) => {
 }));
 
 router.get('/admin/users', handleErrorAsync(async (req, res) => {
-    if (!req.isGranted('users')) {
+    if (!req.isGranted('users') && !req.isGranted('community')) {
         return res.status(401).json({ error: 'Unauthorised' });
     }
 
@@ -216,7 +216,7 @@ router.get('/admin/stats-public', handleErrorAsync(async (req, res) => {
 }));
 
 router.get('/admin/stats/users-chart/:locale', handleErrorAsync(async (req, res) => {
-    if (!req.isGranted('users')) {
+    if (!req.isGranted('users') && !req.isGranted('community')) {
         return res.status(401).json({ error: 'Unauthorised' });
     }