Project

General

Profile

Actions

Feature #133

open

4. Implement Route Security & Auth-Based Header UI

Added by Redmine Admin about 2 months ago. Updated about 2 months ago.

Status:
Ready to QA
Priority:
Normal
Assignee:
-
Start date:
12/16/2025
Due date:
% Done:

0%


Description

Secure application routes based on user authentication and permissions, and update the top navigation bar to display the logged-in user’s name instead of Login / Sign Up actions.


Scope & Requirements

1. Route Protection (Permission-Based Access)

  • Secure the following routes using authentication & role/permission checks:

    • Dashboard
    • Projects
    • Work Products
    • Team
    • Analytics
    • Tool Integrations
    • Settings
  • Unauthorized users:

    • Redirect to Login page
    • Or show Access Denied page (based on permission failure)

2. Header Navigation Update

  • When user is not authenticated:

    • Show Login and Sign Up buttons
  • When user is authenticated:

    • Replace Login / Sign Up with:

      • Welcome, {User Name}

      • Dropdown menu with:

        • Profile
        • Logout

3. Authentication State Handling

  • Persist user session across refresh (token/session-based)

  • Handle expired sessions:

    • Auto logout
    • Redirect to Login
  • Prevent access to protected routes via direct URL entry


UI Changes

  • Replace Login | Sign Up with:

    • 👤 Welcome, John
    • Dropdown menu
  • Hide unauthorized menu items dynamically

Actions

Also available in: Atom PDF