From 96b1af1ce0508c2b5586a834eff22f863d272358 Mon Sep 17 00:00:00 2001
From: Markus Thielker <markus@thielker.dev>
Date: Tue, 8 Apr 2025 10:58:03 +0200
Subject: [PATCH] NORY-46: protect create-client page with permissions

---
 dashboard/src/app/(inside)/client/create/page.tsx | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/dashboard/src/app/(inside)/client/create/page.tsx b/dashboard/src/app/(inside)/client/create/page.tsx
index f42fda6..3aa3c9a 100644
--- a/dashboard/src/app/(inside)/client/create/page.tsx
+++ b/dashboard/src/app/(inside)/client/create/page.tsx
@@ -1,7 +1,19 @@
 import { CreateClientForm } from '@/components/forms/client-form';
 import { createClient } from '@/lib/action/client';
+import { checkPermission, requireSession } from '@/lib/action/authentication';
+import { permission, relation } from '@/lib/permission';
+import { redirect } from 'next/navigation';
 
 export default async function CreateClientPage() {
+
+    const session = await requireSession();
+    const identityId = session.identity!.id;
+
+    const pmCreateClient = await checkPermission(permission.client.it, relation.create, identityId);
+    if (!pmCreateClient) {
+        return redirect('/client');
+    }
+
     return (
         <div className="space-y-4">
             <div>