Refs #5871; Add a dedicated permission "sidekiq.monitor"

2 files changed, 6 insertions, 2 deletions

diff --git a/app/models/user.rb b/app/models/user.rb
index 31e634415..d2fdf8f05 100644
--- a/app/models/user.rb
+++ b/app/models/user.rb
@@ -67,6 +67,10 @@ class User < ActiveRecord::Base
     permissions && permissions.include?(permission)
   end
 
+  def can_monitor_sidekiq?
+    has_permission?("sidekiq.monitor")
+  end
+
   private
 
   # remove organisation and referentials if last user of it
diff --git a/config/routes.rb b/config/routes.rb
index 76d6b6dc7..41b345aa5 100644
--- a/config/routes.rb
+++ b/config/routes.rb
@@ -177,10 +177,10 @@ ChouetteIhm::Application.routes.draw do
     end
   end
 
-  authenticate :user do
+  authenticate :user, lambda { |u| u.can_monitor_sidekiq? } do
     mount Sidekiq::Web => '/sidekiq'
   end
-  
+
   namespace :api do
     namespace :v1 do
       resources :workbenches, except: [:destroy] do