From a98e9f00a1f19b0e1804ca1029bf40e38fc53ed9 Mon Sep 17 00:00:00 2001
From: Andrea Vos <andrea@avris.it>
Date: Mon, 26 Feb 2024 16:14:09 +0000
Subject: [PATCH] (trans) role "code" should also be allowed to see
 /admin/translations

---
 locale/pl/docs/spis-2021/general/stats.json | 2 +-
 routes/adminTranslationsAwaiting.vue        | 2 +-
 server/routes/translations.js               | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/locale/pl/docs/spis-2021/general/stats.json b/locale/pl/docs/spis-2021/general/stats.json
index e848beb56..1c9e62411 100644
--- a/locale/pl/docs/spis-2021/general/stats.json
+++ b/locale/pl/docs/spis-2021/general/stats.json
@@ -239,4 +239,4 @@
         "trigender": 0.5
     },
     "diff": {}
-}
\ No newline at end of file
+}
diff --git a/routes/adminTranslationsAwaiting.vue b/routes/adminTranslationsAwaiting.vue
index 5648d71ee..357f8f605 100644
--- a/routes/adminTranslationsAwaiting.vue
+++ b/routes/adminTranslationsAwaiting.vue
@@ -1,6 +1,6 @@
 <template>
     <Page wide>
-        <NotFound v-if="!$isGranted('translations')" />
+        <NotFound v-if="!$isGranted('translations') && !$isGranted('code')" />
         <div v-else>
             <p>
                 <nuxt-link to="/admin">
diff --git a/server/routes/translations.js b/server/routes/translations.js
index f386f9582..5cd4c7e72 100644
--- a/server/routes/translations.js
+++ b/server/routes/translations.js
@@ -51,7 +51,7 @@ router.post('/translations/propose', handleErrorAsync(async (req, res) => {
 }));
 
 router.get('/translations/proposals', handleErrorAsync(async (req, res) => {
-    if (!req.isGranted('translations')) {
+    if (!req.isGranted('translations') && !req.isGranted('code')) {
         return res.status(401).json({ error: 'Unauthorised' });
     }
 
@@ -135,7 +135,7 @@ router.post('/translations/proposals-done', handleErrorAsync(async (req, res) =>
 }));
 
 router.get('/translations/contributors', handleErrorAsync(async (req, res) => {
-    if (!req.isGranted('translations')) {
+    if (!req.isGranted('translations') && !req.isGranted('code')) {
         return res.status(401).json({ error: 'Unauthorised' });
     }