diff --git a/src/contexts/AuthContext.tsx b/src/contexts/AuthContext.tsx index 4ea310a..d837116 100644 --- a/src/contexts/AuthContext.tsx +++ b/src/contexts/AuthContext.tsx @@ -198,6 +198,7 @@ function AuthContextProvider({ children }: Props) { })) && // 成り代わり条件 (authorization.allowChangedContract === undefined || + role !== UserRole.SUPER_ADMIN || isChangedContractId === authorization.allowChangedContract) ); }, diff --git a/src/routes/auth.ts b/src/routes/auth.ts index a2852a2..419469f 100644 --- a/src/routes/auth.ts +++ b/src/routes/auth.ts @@ -53,8 +53,12 @@ export const AUTH = { R.NORMAL_ADMIN, { custom: [C.HELLO_TECHNO] } ), - [P.DASHBOARD_LOGIN_USER_LIST]: setAuth("eq", R.CONTRACT_ADMIN), - [P.DASHBOARD_LOGIN_USER_CREATE]: setAuth("eq", R.CONTRACT_ADMIN), + [P.DASHBOARD_LOGIN_USER_LIST]: setAuth("ge", R.CONTRACT_ADMIN, { + allowChangedContract: true, + }), + [P.DASHBOARD_LOGIN_USER_CREATE]: setAuth("ge", R.CONTRACT_ADMIN, { + allowChangedContract: true, + }), [P.DASHBOARD_LOGIN_USER_CHANGE_PASSWORD]: setAuth("ge", R.NORMAL_ADMIN), [P.PAGE_403]: setAuth("all"),