fix: update page access (#2432)

rolling-scopes · Feb 13, 2024 · 1e380e9 · 1e380e9
1 parent c504e26
commit 1e380e9
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 7 deletions.
diff --git a/client/src/pages/course/interview/[type]/feedback.tsx b/client/src/pages/course/interview/[type]/feedback.tsx
@@ -9,10 +9,10 @@ export { getServerSideProps };
 
 export default function (props: PageProps) {
   return (
-    <SessionProvider allowedRoles={[CourseRole.Mentor]} course={props.course}>
-      <ActiveCourseProvider>
+    <ActiveCourseProvider>
+      <SessionProvider allowedRoles={[CourseRole.Mentor]} course={props.course}>
         {props.type === stageInterviewType ? <Feedback {...props} /> : <InterviewFeedback {...props} />}
-      </ActiveCourseProvider>
-    </SessionProvider>
+      </SessionProvider>
+    </ActiveCourseProvider>
   );
 }
diff --git a/nestjs/src/courses/interviews/interviews.controller.ts b/nestjs/src/courses/interviews/interviews.controller.ts
@@ -24,7 +24,7 @@ import {
   ApiQuery,
   ApiTags,
 } from '@nestjs/swagger';
-import { CourseGuard, CourseRole, CurrentRequest, DefaultGuard, RequiredRoles, RoleGuard } from '../../auth';
+import { CourseGuard, CourseRole, CurrentRequest, DefaultGuard, RequiredRoles, Role, RoleGuard } from '../../auth';
 import { DEFAULT_CACHE_TTL } from '../../constants';
 import { InterviewDto } from './dto';
 import { AvailableStudentDto } from './dto/available-student.dto';
@@ -85,7 +85,7 @@ export class InterviewsController {
   @ApiForbiddenResponse()
   @ApiBadRequestResponse()
   @ApiOperation({ operationId: 'getAvailableStudents' })
-  @RequiredRoles([CourseRole.Mentor, CourseRole.Supervisor, CourseRole.Manager], true)
+  @RequiredRoles([CourseRole.Mentor, CourseRole.Supervisor, CourseRole.Manager, Role.Admin], true)
   public async getAvailableStudents(
     @Param('courseId', ParseIntPipe) courseId: number,
     @Param('interviewId', ParseIntPipe) interviewId: number,
@@ -112,7 +112,7 @@ export class InterviewsController {
   @ApiForbiddenResponse()
   @ApiBadRequestResponse()
   @ApiOperation({ operationId: 'getInterviewFeedback' })
-  @RequiredRoles([CourseRole.Mentor, CourseRole.Supervisor, CourseRole.Manager], true)
+  @RequiredRoles([CourseRole.Mentor, CourseRole.Supervisor, CourseRole.Manager, Role.Admin], true)
   public async getInterviewFeedback(
     @Param('courseId', ParseIntPipe) _: number,
     @Param('interviewId', ParseIntPipe) interviewId: number,