mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-08-19 14:09:20 -04:00
3ae815528c
rather than allow admins to do everything specifically, we should only block them from things we conciously don't want them to do. This is "Don't let platform admins send letters from services they're not in". Everything else the platform admins can do. This is step one, adding a restrict_admin_usage flag, and setting that for those restricted endpoints around creating api keys, uploading CSVs and sending one-off messages. Also, this commit separates the two use cases for permissions: * user.has_permission for access control * user.has_permission_for_service for user info - this is used for showing checkboxes on the manage-users page for example With this, we can remove the admin_override flag from the permission decorator.
59 lines
1.8 KiB
HTML
59 lines
1.8 KiB
HTML
{% extends "withnav_template.html" %}
|
|
|
|
{% from "components/big-number.html" import big_number, big_number_with_status %}
|
|
{% from "components/show-more.html" import show_more %}
|
|
{% from "components/message-count-label.html" import message_count_label %}
|
|
{% from "components/table.html" import list_table, field, right_aligned_field_heading, hidden_field_heading %}
|
|
{% from "components/ajax-block.html" import ajax_block %}
|
|
|
|
{% block service_page_title %}
|
|
Dashboard
|
|
{% endblock %}
|
|
|
|
{% block maincolumn_content %}
|
|
|
|
<div class="dashboard">
|
|
|
|
<h1 class="visuallyhidden">Dashboard</h1>
|
|
{% if current_user.has_permissions('manage_templates', admin_override=True) %}
|
|
{% if not templates %}
|
|
{% include 'views/dashboard/write-first-messages.html' %}
|
|
{% endif %}
|
|
{% elif not current_user.has_permissions('send_messages', 'manage_api_keys', any_=True, admin_override=True) %}
|
|
{% include 'views/dashboard/no-permissions-banner.html' %}
|
|
{% endif %}
|
|
|
|
{{ ajax_block(partials, updates_url, 'upcoming') }}
|
|
|
|
<h2 class="heading-medium">
|
|
In the last 7 days
|
|
</h2>
|
|
|
|
{{ ajax_block(partials, updates_url, 'inbox') }}
|
|
|
|
{{ ajax_block(partials, updates_url, 'totals') }}
|
|
{{ show_more(
|
|
url_for('.monthly', service_id=current_service.id),
|
|
'See messages sent per month'
|
|
) }}
|
|
|
|
{% if partials['has_template_statistics'] %}
|
|
{{ ajax_block(partials, updates_url, 'template-statistics') }}
|
|
{{ show_more(
|
|
url_for('.template_usage', service_id=current_service.id),
|
|
'See templates used by month'
|
|
) }}
|
|
{% endif %}
|
|
|
|
{% if partials['has_jobs'] %}
|
|
{{ ajax_block(partials, updates_url, 'jobs') }}
|
|
{{ show_more(
|
|
url_for('.view_jobs', service_id=current_service.id),
|
|
'See all uploaded files'
|
|
) }}
|
|
{% endif %}
|
|
|
|
</div>
|
|
|
|
{% endblock %}
|