paperless-ngx/src-ui/src/app/guards/permissions.guard.ts

import { Injectable, inject } from '@angular/core'
import {
  ActivatedRouteSnapshot,
  Router,
  RouterStateSnapshot,
  UrlTree,
} from '@angular/router'
import { TourService } from 'ngx-ui-tour-ng-bootstrap'
import { PermissionsService } from '../services/permissions.service'
import { ToastService } from '../services/toast.service'

@Injectable()
export class PermissionsGuard {
  private permissionsService = inject(PermissionsService)
  private router = inject(Router)
  private toastService = inject(ToastService)
  private tourService = inject(TourService)

  canActivate(
    route: ActivatedRouteSnapshot,
    state: RouterStateSnapshot
  ): boolean | UrlTree {
    const requiredPermissionAny: { action: any; type: any }[] =
      route.data.requiredPermissionAny

    if (
      (route.data.requireAdmin && !this.permissionsService.isAdmin()) ||
      (route.data.requiredPermission &&
        !this.permissionsService.currentUserCan(
          route.data.requiredPermission.action,
          route.data.requiredPermission.type
        )) ||
      (Array.isArray(requiredPermissionAny) &&
        requiredPermissionAny.length > 0 &&
        !requiredPermissionAny.some((p) =>
          this.permissionsService.currentUserCan(p.action, p.type)
        ))
    ) {
      // Check if tour is running 1 = TourState.ON
      if (this.tourService.getStatus() !== 1) {
        this.toastService.showError(
          $localize`You don't have permissions to do that`
        )
      }
      return this.router.parseUrl('/dashboard')
    } else {
      return true
    }
  }
}