Role in client route authorization

[f2net]

I think it would be useful to have "authorization:admin" or "authorization:user" inside the client routes. Otherwise a user could see the admin interface of a page which doesn't call an API (thus returning the 401 error). It is true that the HTML interface should contain no secrets, but I think it is better not to allow the routing to an admin page to a simple user.

[kingcody]

I'm kinda with you on this one @f2net. We could simply make a call to Auth.isAdmin

[JaKXz]

As @kingcody said, you can make a call to the Auth factory. You're welcome to add the methods for the other default roles in a PR.

[trainerbill]

I just create a PR:

#840

Now you can place a param authorize on the ui state to check if its an admin user.

[Awk34]

This has been resolved with the Auth module, thanks to @kingcody