fix: permissions not restricted for certain management pages / actions (#1219)

* fix: restrict parts of manage navigation to admins

* fix: restrict stats cards on manage home page

* fix: restrict access to amount of certain stats for manage home

* fix: restrict visibility of board create button

* fix: restrict access to integration pages

* fix: restrict access to tools pages for admins

* fix: restrict access to user and group pages

* test: adjust tests to match permission changes for routes

* fix: remove certain pages from spotlight without admin

* fix: app management not restricted

packages/spotlight/src/modes/page/pages-search-group.tsx

@@ -93,7 +93,7 @@ export const pagesSearchGroup = createGroup<{
         icon: IconUsers,
         path: "/manage/users",
         name: t("manageUser.label"),
-        hidden: !session,
+        hidden: !session?.user.permissions.includes("admin"),
       },
       {
         icon: IconMailForward,
@@ -105,7 +105,7 @@ export const pagesSearchGroup = createGroup<{
         icon: IconUsersGroup,
         path: "/manage/users/groups",
         name: t("manageGroup.label"),
-        hidden: !session,
+        hidden: !session?.user.permissions.includes("admin"),
       },
       {
         icon: IconBrandDocker,
@@ -117,7 +117,7 @@ export const pagesSearchGroup = createGroup<{
         icon: IconPlug,
         path: "/manage/tools/api",
         name: t("manageApi.label"),
-        hidden: !session,
+        hidden: !session?.user.permissions.includes("admin"),
       },
       {
         icon: IconLogs,