pixiebrix-extension
pixiebrix-extension copied to clipboard
Restrict extension interface for partner installs
Context
- https://github.com/pixiebrix/pixiebrix-extension/issues/3134
- End-users using a partner token will only have access to deployments: https://github.com/pixiebrix/pixiebrix-app/issues/1489
Implementation Sketch
- Modify RequireAuth to check for either: 1) the token, or 2) a partner JWT
- Hide screens other than the "Active Blueprints" screen if the user is using a partner JWT
- On the settings page, show same settings as "restricted" organization users
- On Page Editor, so a message that full PixieBrix account is required to use the Page Editor. You might modify RequireAuth to support requiring a real PB token?