umair-khanzada / role-based-access-control Goto Github PK

How can we use dynamic url?

<Route path='/data/:tab' component={Data} />

Even If I have this array of children routes passed as parameter to getAllowedRoutes() function it kept telling me of Type Error.
here are my list of routes

I noticed that after logging in, I am able to use the Chrome Dev tools to change my role (example: GUEST to SUPER_ADMIN)... all I have to do is navigate to any thing in the app and it instantly shows me all the links on the navbar which are available to the new role I entered. What would be a good way to keep this from happening? I wouldn't want them to see any data or perform any actions that they aren't authorized for.

Is there a possible way to make it a nested route?

for example,
Manager can access into '/service/service1' but can't access into '/service/service2' although
SupportManager can access into it.

and '/service' is the main route for them.

How can I achieve this?

Please note that I did tried, by using this example https://reacttraining.com/react-router/web/example/route-config
implementing it in PrivateRoutes.js
but nested routes are not rendering, help?