Students should not be able to see the inventory views
We've been asked whether or not students can see the suites assigned to a draw prior to entering the group formation phase. The answer is that the draw page doesn't show that information in the intent phase, and there are no navigation links to the inventory pages for students, but those routes are accessible.
We should update all of our inventory resource policies to restrict access to admins and up.
Steps to replicate:
- Log in as student
- Visit building path (i.e.
/buildings/1
)
Expected: authorization redirect
Actual: page is accessible