From b9427ecf6da1e9662f35c2179b0647f0e2316152 Mon Sep 17 00:00:00 2001
From: Marliana Lara <mlara@redhat.com>
Date: Mon, 23 Apr 2018 13:07:23 -0400
Subject: [PATCH] Show instance groups tab if user is an Org Admin

---
 .../lib/components/layout/layout.directive.js | 28 +++++++++++++++++--
 .../lib/components/layout/layout.partial.html |  2 +-
 2 files changed, 26 insertions(+), 4 deletions(-)

diff --git a/awx/ui/client/lib/components/layout/layout.directive.js b/awx/ui/client/lib/components/layout/layout.directive.js
index f853c5bb19..c6fddc51e4 100644
--- a/awx/ui/client/lib/components/layout/layout.directive.js
+++ b/awx/ui/client/lib/components/layout/layout.directive.js
@@ -1,6 +1,6 @@
 const templateUrl = require('~components/layout/layout.partial.html');
 
-function AtLayoutController ($scope, strings, $transitions) {
+function AtLayoutController ($scope, $http, strings, ProcessErrors, $transitions) {
     const vm = this || {};
 
     $transitions.onSuccess({}, (transition) => {
@@ -9,10 +9,14 @@ function AtLayoutController ($scope, strings, $transitions) {
 
     $scope.$watch('$root.current_user', (val) => {
         vm.isLoggedIn = val && val.username;
-        if (val) {
+        if (!_.isEmpty(val)) {
             vm.isSuperUser = $scope.$root.user_is_superuser || $scope.$root.user_is_system_auditor;
             vm.currentUsername = val.username;
             vm.currentUserId = val.id;
+
+            if (!vm.isSuperUser) {
+                checkOrgAdmin();
+            }
         }
     });
 
@@ -32,9 +36,27 @@ function AtLayoutController ($scope, strings, $transitions) {
             return strings.get(string);
         }
     };
+
+    function checkOrgAdmin () {
+        const usersPath = `/api/v2/users/${vm.currentUserId}/admin_of_organizations/`;
+        $http.get(usersPath)
+            .then(({ data }) => {
+                if (data.count > 0) {
+                    vm.isOrgAdmin = true;
+                } else {
+                    vm.isOrgAdmin = false;
+                }
+            })
+            .catch(({ data, status }) => {
+                ProcessErrors(null, data, status, null, {
+                    hdr: strings.get('error.HEADER'),
+                    msg: strings.get('error.CALL', { path: usersPath, action: 'GET', status })
+                });
+            });
+    }
 }
 
-AtLayoutController.$inject = ['$scope', 'ComponentsStrings', '$transitions'];
+AtLayoutController.$inject = ['$scope', '$http', 'ComponentsStrings', 'ProcessErrors', '$transitions'];
 
 function atLayout () {
     return {
diff --git a/awx/ui/client/lib/components/layout/layout.partial.html b/awx/ui/client/lib/components/layout/layout.partial.html
index ada6b2f1ea..4714a23172 100644
--- a/awx/ui/client/lib/components/layout/layout.partial.html
+++ b/awx/ui/client/lib/components/layout/layout.partial.html
@@ -85,7 +85,7 @@
             system-admin-only="true">
         </at-side-nav-item>
         <at-side-nav-item icon-class="fa-server" route="instanceGroups" name="INSTANCE_GROUPS"
-            system-admin-only="true">
+            ng-show="$parent.layoutVm.isSuperUser || $parent.layoutVm.isOrgAdmin">
         </at-side-nav-item>
         <at-side-nav-item icon-class="fa-cubes" route="applications" name="APPLICATIONS"
             system-admin-only="true">