From 0ec2b289a71e6c5199bd8e2a23ab6548704dc79a Mon Sep 17 00:00:00 2001
From: "Pablo F.G" <pablo.fernandez@prowler.com>
Date: Mon, 20 Jul 2026 15:29:18 +0200
Subject: [PATCH] feat(ui): gate /billing on the cloud flag in proxy

---
 ui/proxy.ts | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/ui/proxy.ts b/ui/proxy.ts
index 8784fd260f..4766d8b6ea 100644
--- a/ui/proxy.ts
+++ b/ui/proxy.ts
@@ -3,6 +3,7 @@ import type { NextAuthRequest } from "next-auth";
 
 import { auth } from "@/auth.config";
 import { readEnv } from "@/lib/runtime-env";
+import { isCloud } from "@/lib/shared/env";
 
 const publicRoutes = [
   "/sign-in",
@@ -43,7 +44,9 @@ export default auth((req: NextAuthRequest) => {
 
   if (
     pathname.startsWith("/billing") &&
-    (!cloudBillingEnabled || user?.permissions?.manage_billing !== true)
+    (!isCloud() ||
+      !cloudBillingEnabled ||
+      user?.permissions?.manage_billing !== true)
   ) {
     return NextResponse.redirect(new URL("/profile", req.url));
   }