From 596c214f1ce924c1d6b7b08c94b7c1038a68fa79 Mon Sep 17 00:00:00 2001
From: Wyatt Johnson <wyattjoh@gmail.com>
Date: Wed, 31 Jan 2018 13:41:07 -0700
Subject: [PATCH 1/2] allowed moderators to configure asset

---
 client/coral-embed-stream/src/components/Embed.js | 2 +-
 client/coral-framework/services/perms.js          | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/client/coral-embed-stream/src/components/Embed.js b/client/coral-embed-stream/src/components/Embed.js
index 980e5745e..0fd257ef2 100644
--- a/client/coral-embed-stream/src/components/Embed.js
+++ b/client/coral-embed-stream/src/components/Embed.js
@@ -43,7 +43,7 @@ export default class Embed extends React.Component {
         {t('framework.my_profile')}
       </Tab>,
     ];
-    if (can(user, 'UPDATE_CONFIG')) {
+    if (can(user, 'UPDATE_ASSET_CONFIG')) {
       tabs.push(
         <Tab
           key="config"
diff --git a/client/coral-framework/services/perms.js b/client/coral-framework/services/perms.js
index 9d588c5e2..3250d40a2 100644
--- a/client/coral-framework/services/perms.js
+++ b/client/coral-framework/services/perms.js
@@ -33,6 +33,7 @@ const basicRoles = {
 };
 
 const queryRoles = {
+  UPDATE_ASSET_CONFIG: [ADMIN, MODERATOR],
   UPDATE_CONFIG: [ADMIN],
   ACCESS_ADMIN: [ADMIN, MODERATOR],
   VIEW_USER_EMAILS: [ADMIN],

From c4b6cb54e60893bafceef07ea44d1904eb100ab2 Mon Sep 17 00:00:00 2001
From: Leandro <leeeandroo@gmail.com>
Date: Thu, 1 Feb 2018 13:27:17 +0100
Subject: [PATCH 2/2] Insert BASE_PATH on public assets

---
 views/admin/confirm-email.ejs  | 2 +-
 views/admin/password-reset.ejs | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/views/admin/confirm-email.ejs b/views/admin/confirm-email.ejs
index f8f6c62f2..8c0d85e01 100644
--- a/views/admin/confirm-email.ejs
+++ b/views/admin/confirm-email.ejs
@@ -6,7 +6,7 @@
     <title>Email Verification</title>
     <link rel="stylesheet" href="https://fonts.googleapis.com/icon?family=Material+Icons">
     <link rel="stylesheet" href="https://code.getmdl.io/1.2.1/material.indigo-pink.min.css">
-    <link rel="stylesheet" href="/public/css/admin.css">
+    <link rel="stylesheet" href="<%= BASE_PATH %>public/css/admin.css">
     <%_ if (locals.customCssUrl) { _%>
     <link href="<%= customCssUrl %>" rel="stylesheet" type="text/css">
     <%_ } _%>
diff --git a/views/admin/password-reset.ejs b/views/admin/password-reset.ejs
index c5bb4ef90..ae06b5179 100644
--- a/views/admin/password-reset.ejs
+++ b/views/admin/password-reset.ejs
@@ -6,7 +6,7 @@
     <title>Password Reset</title>
     <link rel="stylesheet" href="https://fonts.googleapis.com/icon?family=Material+Icons">
     <link rel="stylesheet" href="https://code.getmdl.io/1.2.1/material.indigo-pink.min.css">
-    <link rel="stylesheet" href="/public/css/admin.css">
+    <link rel="stylesheet" href="<%= BASE_PATH %>public/css/admin.css">
     <%_ if (locals.customCssUrl) { _%>
     <link href="<%= customCssUrl %>" rel="stylesheet" type="text/css">
     <%_ } _%>