very basics of security have been added.

src/cljs/auto_ap/subs.cljs

@@ -50,8 +50,7 @@
  ::user
  (fn [db]
    (when (:user db)
-     (let [{:strs [name] :as x} (js->clj (.parse js/JSON (base64/decodeString (second (str/split (:user db) #"\.")))))]
-       {:name name}))))
+     (js->clj (.parse js/JSON (base64/decodeString (second (str/split (:user db) #"\.")))) :keywordize-keys true))))
 
 (re-frame/reg-sub
  ::active-page

src/cljs/auto_ap/views/main.cljs

@@ -13,18 +13,18 @@
   ({:login :blank
     :check :blank
     :needs-activation :blank
-     :index :left-panel
-     :invoices :left-panel
-     :import-invoices :left-panel
-     :unpaid-invoices :left-panel
-     :paid-invoices :left-panel
+    :index :left-panel
+    :invoices :left-panel
+    :import-invoices :left-panel
+    :unpaid-invoices :left-panel
+    :paid-invoices :left-panel
     :admin :admin-left-panel
     :admin-companies :admin-left-panel
     :admin-users :admin-left-panel
     :admin-excel-import :admin-left-panel
     :admin-vendors :admin-left-panel
     :admin-reminders :admin-left-panel
-     :new-invoice :blank} page :blank))
+    :new-invoice :blank} page :blank))
 
 (defn login-dropdown []
   (let [user (re-frame/subscribe [::subs/user])
@@ -36,8 +36,9 @@
          [:a {:class "navbar-link login" :on-click (fn [e] (re-frame/dispatch [::events/toggle-menu :account]))} (:name @user)]
          [:div {:class "navbar-dropdown"}
           [:a {:class "navbar-item"} "My profile"]
-          [:a {:class "navbar-item" :href (bidi/path-for routes/routes :admin)
-               :on-click (fn [e] (re-frame/dispatch [::events/toggle-menu :account]))} "Administration"]
+          (when (= "admin" (:role @user))
+            [:a {:class "navbar-item" :href (bidi/path-for routes/routes :admin)
+                 :on-click (fn [e] (re-frame/dispatch [::events/toggle-menu :account]))} "Administration"])
           [:hr {:class "navbar-divider"}]
           [:a.navbar-item {:on-click (fn [e] (.preventDefault e) (re-frame/dispatch [::events/logout]))} "Logout"]]]
         [:a.navbar-item {:href login-url} "Login"])]]))
@@ -169,7 +170,7 @@
 
         [:p.menu-label "Accounts Payable"]
         [:ul.menu-list
-         [:li.menu-item
+         #_[:li.menu-item
           [:a {:href (bidi/path-for routes/routes :import-invoices) , :class (str "item" (active-when= ap :import-invoices))}
            [:span {:class "icon"}
             [:i {:class "fa fa-star-o"}]]

src/cljs/auto_ap/views/pages/index.cljs

@@ -4,6 +4,4 @@
 
 (defn index-page []
   [:div
-   [:h1.title "Dashboard"]
-   [:h2.subtitle "To get started, "
-    [:a {:href (bidi/path-for routes/routes :import-invoices)} "Import some invoices"]]])
+   [:h1.title "Dashboard"]])