From 045ed0024a7adf44178d78995166434fdbc4a313 Mon Sep 17 00:00:00 2001
From: Raju Udava <86527202+dstala@users.noreply.github.com>
Date: Fri, 3 Jun 2022 19:25:57 +0530
Subject: [PATCH] fix: disable api docs access for viewer role

Signed-off-by: Raju Udava <86527202+dstala@users.noreply.github.com>
---
 .../nc-gui/components/ProjectTreeView.vue     | 22 ++++++++++---------
 packages/nc-gui/helpers/rolePermissionsEE.js  |  3 ++-
 2 files changed, 14 insertions(+), 11 deletions(-)

diff --git a/packages/nc-gui/components/ProjectTreeView.vue b/packages/nc-gui/components/ProjectTreeView.vue
index eedd1e075f..dda35fa017 100644
--- a/packages/nc-gui/components/ProjectTreeView.vue
+++ b/packages/nc-gui/components/ProjectTreeView.vue
@@ -681,16 +681,18 @@
         </div>
 
         <v-divider />
-        <div
-          v-t="['e:api-docs']"
-          class="caption pointer nc-docs pb-2 pl-5 pr-3 pt-2 d-flex align-center"
-          @click="openLink(apiLink)"
-        >
-          <v-icon color="brown" small class="mr-2">
-            mdi-open-in-new
-          </v-icon>
-          {{ $t('title.apiDocs') }}
-        </div>
+        <template v-if="_isUIAllowed('apiDocs')">
+          <div
+            v-t="['e:api-docs']"
+            class="caption pointer nc-docs pb-2 pl-5 pr-3 pt-2 d-flex align-center"
+            @click="openLink(apiLink)"
+          >
+            <v-icon color="brown" small class="mr-2">
+              mdi-open-in-new
+            </v-icon>
+            {{ $t('title.apiDocs') }}
+          </div>
+        </template>
 
         <template v-if="_isUIAllowed('settings')">
           <div class="pl-5 pr-3 d-flex align-center pb-2">
diff --git a/packages/nc-gui/helpers/rolePermissionsEE.js b/packages/nc-gui/helpers/rolePermissionsEE.js
index 3fd9c12907..cd2882cebb 100644
--- a/packages/nc-gui/helpers/rolePermissionsEE.js
+++ b/packages/nc-gui/helpers/rolePermissionsEE.js
@@ -14,7 +14,8 @@ export default {
     fieldsSync: true,
     gridColUpdate: true,
     filterSync: true,
-    csvImport: true
+    csvImport: true,
+    apiDocs: true
   },
   commenter: {
     smartSheet: true,