From 44c8cf77bbfeac1f390238cb189ddba2f9c2adc0 Mon Sep 17 00:00:00 2001
From: shibao <shibao@bubbletea.dev>
Date: Thu, 24 Nov 2022 17:15:10 -0500
Subject: [PATCH] only show action buttons when appropriate

---
 lib/memex_web/live/context_live/index.ex       | 11 ++++++++++-
 .../live/context_live/index.html.heex          |  4 +++-
 lib/memex_web/live/context_live/show.ex        | 11 ++++++++++-
 lib/memex_web/live/context_live/show.html.heex |  7 ++++---
 lib/memex_web/live/note_live/index.ex          | 11 ++++++++++-
 lib/memex_web/live/note_live/index.html.heex   |  4 +++-
 lib/memex_web/live/note_live/show.ex           | 11 ++++++++++-
 lib/memex_web/live/note_live/show.html.heex    |  7 ++++---
 lib/memex_web/live/pipeline_live/index.ex      | 11 ++++++++++-
 .../live/pipeline_live/index.html.heex         |  4 +++-
 lib/memex_web/live/pipeline_live/show.ex       | 11 ++++++++++-
 .../live/pipeline_live/show.html.heex          |  7 ++++---
 priv/gettext/actions.pot                       | 18 +++++++++---------
 priv/gettext/prompts.pot                       | 12 ++++++------
 14 files changed, 96 insertions(+), 33 deletions(-)

diff --git a/lib/memex_web/live/context_live/index.ex b/lib/memex_web/live/context_live/index.ex
index d4c0666..e9efdaa 100644
--- a/lib/memex_web/live/context_live/index.ex
+++ b/lib/memex_web/live/context_live/index.ex
@@ -1,6 +1,6 @@
 defmodule MemexWeb.ContextLive.Index do
   use MemexWeb, :live_view
-  alias Memex.{Contexts, Contexts.Context}
+  alias Memex.{Accounts.User, Contexts, Contexts.Context}
 
   @impl true
   def mount(%{"search" => search}, _session, socket) do
@@ -77,4 +77,13 @@ defmodule MemexWeb.ContextLive.Index do
   defp display_contexts(%{assigns: %{search: search}} = socket) do
     socket |> assign(contexts: Contexts.list_public_contexts(search))
   end
+
+  @spec is_owner_or_admin?(Context.t(), User.t()) :: boolean()
+  defp is_owner_or_admin?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner_or_admin?(_context, %{role: :admin}), do: true
+  defp is_owner_or_admin?(_context, _other_user), do: false
+
+  @spec is_owner?(Context.t(), User.t()) :: boolean()
+  defp is_owner?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner?(_context, _other_user), do: false
 end
diff --git a/lib/memex_web/live/context_live/index.html.heex b/lib/memex_web/live/context_live/index.html.heex
index ab8ae63..4e8bdbb 100644
--- a/lib/memex_web/live/context_live/index.html.heex
+++ b/lib/memex_web/live/context_live/index.html.heex
@@ -30,13 +30,15 @@
       contexts={@contexts}
     >
       <:actions :let={context}>
-        <%= if @current_user do %>
+        <%= if is_owner?(context, @current_user) do %>
           <.link
             patch={Routes.context_index_path(@socket, :edit, context)}
             data-qa={"context-edit-#{context.id}"}
           >
             <%= dgettext("actions", "edit") %>
           </.link>
+        <% end %>
+        <%= if is_owner_or_admin?(context, @current_user) do %>
           <.link
             href="#"
             phx-click="delete"
diff --git a/lib/memex_web/live/context_live/show.ex b/lib/memex_web/live/context_live/show.ex
index 3e3239a..7215374 100644
--- a/lib/memex_web/live/context_live/show.ex
+++ b/lib/memex_web/live/context_live/show.ex
@@ -1,7 +1,7 @@
 defmodule MemexWeb.ContextLive.Show do
   use MemexWeb, :live_view
 
-  alias Memex.Contexts
+  alias Memex.{Accounts.User, Contexts, Contexts.Context}
 
   @impl true
   def mount(_params, _session, socket) do
@@ -38,4 +38,13 @@ defmodule MemexWeb.ContextLive.Show do
 
   defp page_title(:show), do: gettext("show context")
   defp page_title(:edit), do: gettext("edit context")
+
+  @spec is_owner_or_admin?(Context.t(), User.t()) :: boolean()
+  defp is_owner_or_admin?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner_or_admin?(_context, %{role: :admin}), do: true
+  defp is_owner_or_admin?(_context, _other_user), do: false
+
+  @spec is_owner?(Context.t(), User.t()) :: boolean()
+  defp is_owner?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner?(_context, _other_user), do: false
 end
diff --git a/lib/memex_web/live/context_live/show.html.heex b/lib/memex_web/live/context_live/show.html.heex
index c1fe16e..716cd07 100644
--- a/lib/memex_web/live/context_live/show.html.heex
+++ b/lib/memex_web/live/context_live/show.html.heex
@@ -19,14 +19,15 @@
   </p>
 
   <div class="self-end flex space-x-4">
-    <.link class="btn btn-primary" patch={Routes.context_index_path(@socket, :index)}>
+    <.link class="btn btn-primary" navigate={Routes.context_index_path(@socket, :index)}>
       <%= dgettext("actions", "back") %>
     </.link>
-    <%= if @current_user do %>
+    <%= if is_owner?(@context, @current_user) do %>
       <.link class="btn btn-primary" patch={Routes.context_show_path(@socket, :edit, @context)}>
         <%= dgettext("actions", "edit") %>
       </.link>
-
+    <% end %>
+    <%= if is_owner_or_admin?(@context, @current_user) do %>
       <button
         type="button"
         class="btn btn-primary"
diff --git a/lib/memex_web/live/note_live/index.ex b/lib/memex_web/live/note_live/index.ex
index f0457d8..18f328c 100644
--- a/lib/memex_web/live/note_live/index.ex
+++ b/lib/memex_web/live/note_live/index.ex
@@ -1,6 +1,6 @@
 defmodule MemexWeb.NoteLive.Index do
   use MemexWeb, :live_view
-  alias Memex.{Notes, Notes.Note}
+  alias Memex.{Accounts.User, Notes, Notes.Note}
 
   @impl true
   def mount(%{"search" => search}, _session, socket) do
@@ -76,4 +76,13 @@ defmodule MemexWeb.NoteLive.Index do
   defp display_notes(%{assigns: %{search: search}} = socket) do
     socket |> assign(notes: Notes.list_public_notes(search))
   end
+
+  @spec is_owner_or_admin?(Note.t(), User.t()) :: boolean()
+  defp is_owner_or_admin?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner_or_admin?(_context, %{role: :admin}), do: true
+  defp is_owner_or_admin?(_context, _other_user), do: false
+
+  @spec is_owner?(Note.t(), User.t()) :: boolean()
+  defp is_owner?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner?(_context, _other_user), do: false
 end
diff --git a/lib/memex_web/live/note_live/index.html.heex b/lib/memex_web/live/note_live/index.html.heex
index 04c08d8..5be724d 100644
--- a/lib/memex_web/live/note_live/index.html.heex
+++ b/lib/memex_web/live/note_live/index.html.heex
@@ -30,13 +30,15 @@
       notes={@notes}
     >
       <:actions :let={note}>
-        <%= if @current_user do %>
+        <%= if is_owner?(note, @current_user) do %>
           <.link
             patch={Routes.note_index_path(@socket, :edit, note)}
             data-qa={"note-edit-#{note.id}"}
           >
             <%= dgettext("actions", "edit") %>
           </.link>
+        <% end %>
+        <%= if is_owner_or_admin?(note, @current_user) do %>
           <.link
             href="#"
             phx-click="delete"
diff --git a/lib/memex_web/live/note_live/show.ex b/lib/memex_web/live/note_live/show.ex
index 7142726..071d9f3 100644
--- a/lib/memex_web/live/note_live/show.ex
+++ b/lib/memex_web/live/note_live/show.ex
@@ -1,7 +1,7 @@
 defmodule MemexWeb.NoteLive.Show do
   use MemexWeb, :live_view
 
-  alias Memex.Notes
+  alias Memex.{Accounts.User, Notes, Notes.Note}
 
   @impl true
   def mount(_params, _session, socket) do
@@ -38,4 +38,13 @@ defmodule MemexWeb.NoteLive.Show do
 
   defp page_title(:show), do: gettext("show note")
   defp page_title(:edit), do: gettext("edit note")
+
+  @spec is_owner_or_admin?(Note.t(), User.t()) :: boolean()
+  defp is_owner_or_admin?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner_or_admin?(_context, %{role: :admin}), do: true
+  defp is_owner_or_admin?(_context, _other_user), do: false
+
+  @spec is_owner?(Note.t(), User.t()) :: boolean()
+  defp is_owner?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner?(_context, _other_user), do: false
 end
diff --git a/lib/memex_web/live/note_live/show.html.heex b/lib/memex_web/live/note_live/show.html.heex
index 9d8372f..bca7c55 100644
--- a/lib/memex_web/live/note_live/show.html.heex
+++ b/lib/memex_web/live/note_live/show.html.heex
@@ -19,14 +19,15 @@
   </p>
 
   <div class="self-end flex space-x-4">
-    <.link class="btn btn-primary" patch={Routes.note_index_path(@socket, :index)}>
+    <.link class="btn btn-primary" navigate={Routes.note_index_path(@socket, :index)}>
       <%= dgettext("actions", "back") %>
     </.link>
-    <%= if @current_user do %>
+    <%= if is_owner?(@note, @current_user) do %>
       <.link class="btn btn-primary" patch={Routes.note_show_path(@socket, :edit, @note)}>
         <%= dgettext("actions", "edit") %>
       </.link>
-
+    <% end %>
+    <%= if is_owner_or_admin?(@note, @current_user) do %>
       <button
         type="button"
         class="btn btn-primary"
diff --git a/lib/memex_web/live/pipeline_live/index.ex b/lib/memex_web/live/pipeline_live/index.ex
index 2ee1b35..c354a08 100644
--- a/lib/memex_web/live/pipeline_live/index.ex
+++ b/lib/memex_web/live/pipeline_live/index.ex
@@ -1,6 +1,6 @@
 defmodule MemexWeb.PipelineLive.Index do
   use MemexWeb, :live_view
-  alias Memex.{Pipelines, Pipelines.Pipeline}
+  alias Memex.{Accounts.User, Pipelines, Pipelines.Pipeline}
 
   @impl true
   def mount(%{"search" => search}, _session, socket) do
@@ -77,4 +77,13 @@ defmodule MemexWeb.PipelineLive.Index do
   defp display_pipelines(%{assigns: %{search: search}} = socket) do
     socket |> assign(pipelines: Pipelines.list_public_pipelines(search))
   end
+
+  @spec is_owner_or_admin?(Pipeline.t(), User.t()) :: boolean()
+  defp is_owner_or_admin?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner_or_admin?(_context, %{role: :admin}), do: true
+  defp is_owner_or_admin?(_context, _other_user), do: false
+
+  @spec is_owner?(Pipeline.t(), User.t()) :: boolean()
+  defp is_owner?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner?(_context, _other_user), do: false
 end
diff --git a/lib/memex_web/live/pipeline_live/index.html.heex b/lib/memex_web/live/pipeline_live/index.html.heex
index ec04bb9..58a774f 100644
--- a/lib/memex_web/live/pipeline_live/index.html.heex
+++ b/lib/memex_web/live/pipeline_live/index.html.heex
@@ -30,13 +30,15 @@
       pipelines={@pipelines}
     >
       <:actions :let={pipeline}>
-        <%= if @current_user do %>
+        <%= if is_owner?(pipeline, @current_user) do %>
           <.link
             patch={Routes.pipeline_index_path(@socket, :edit, pipeline)}
             data-qa={"pipeline-edit-#{pipeline.id}"}
           >
             <%= dgettext("actions", "edit") %>
           </.link>
+        <% end %>
+        <%= if is_owner_or_admin?(pipeline, @current_user) do %>
           <.link
             href="#"
             phx-click="delete"
diff --git a/lib/memex_web/live/pipeline_live/show.ex b/lib/memex_web/live/pipeline_live/show.ex
index e6a548d..4f01d0e 100644
--- a/lib/memex_web/live/pipeline_live/show.ex
+++ b/lib/memex_web/live/pipeline_live/show.ex
@@ -1,7 +1,7 @@
 defmodule MemexWeb.PipelineLive.Show do
   use MemexWeb, :live_view
 
-  alias Memex.Pipelines
+  alias Memex.{Accounts.User, Pipelines, Pipelines.Pipeline}
 
   @impl true
   def mount(_params, _session, socket) do
@@ -38,4 +38,13 @@ defmodule MemexWeb.PipelineLive.Show do
 
   defp page_title(:show), do: gettext("show pipeline")
   defp page_title(:edit), do: gettext("edit pipeline")
+
+  @spec is_owner_or_admin?(Pipeline.t(), User.t()) :: boolean()
+  defp is_owner_or_admin?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner_or_admin?(_context, %{role: :admin}), do: true
+  defp is_owner_or_admin?(_context, _other_user), do: false
+
+  @spec is_owner?(Pipeline.t(), User.t()) :: boolean()
+  defp is_owner?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner?(_context, _other_user), do: false
 end
diff --git a/lib/memex_web/live/pipeline_live/show.html.heex b/lib/memex_web/live/pipeline_live/show.html.heex
index eea830d..3c9b041 100644
--- a/lib/memex_web/live/pipeline_live/show.html.heex
+++ b/lib/memex_web/live/pipeline_live/show.html.heex
@@ -19,14 +19,15 @@
   </p>
 
   <div class="self-end flex space-x-4">
-    <.link class="btn btn-primary" patch={Routes.pipeline_index_path(@socket, :index)}>
+    <.link class="btn btn-primary" navigate={Routes.pipeline_index_path(@socket, :index)}>
       <%= dgettext("actions", "back") %>
     </.link>
-    <%= if @current_user do %>
+    <%= if is_owner?(@pipeline, @current_user) do %>
       <.link class="btn btn-primary" patch={Routes.pipeline_show_path(@socket, :edit, @pipeline)}>
         <%= dgettext("actions", "edit") %>
       </.link>
-
+    <% end %>
+    <%= if is_owner_or_admin?(@pipeline, @current_user) do %>
       <button
         type="button"
         class="btn btn-primary"
diff --git a/priv/gettext/actions.pot b/priv/gettext/actions.pot
index fc6c651..e45d3af 100644
--- a/priv/gettext/actions.pot
+++ b/priv/gettext/actions.pot
@@ -67,12 +67,12 @@ msgstr ""
 msgid "create invite"
 msgstr ""
 
-#: lib/memex_web/live/context_live/index.html.heex:47
-#: lib/memex_web/live/context_live/show.html.heex:37
-#: lib/memex_web/live/note_live/index.html.heex:47
-#: lib/memex_web/live/note_live/show.html.heex:37
-#: lib/memex_web/live/pipeline_live/index.html.heex:47
-#: lib/memex_web/live/pipeline_live/show.html.heex:37
+#: lib/memex_web/live/context_live/index.html.heex:49
+#: lib/memex_web/live/context_live/show.html.heex:38
+#: lib/memex_web/live/note_live/index.html.heex:49
+#: lib/memex_web/live/note_live/show.html.heex:38
+#: lib/memex_web/live/pipeline_live/index.html.heex:49
+#: lib/memex_web/live/pipeline_live/show.html.heex:38
 #, elixir-autogen, elixir-format
 msgid "delete"
 msgstr ""
@@ -108,17 +108,17 @@ msgstr ""
 msgid "log in"
 msgstr ""
 
-#: lib/memex_web/live/context_live/index.html.heex:56
+#: lib/memex_web/live/context_live/index.html.heex:58
 #, elixir-autogen, elixir-format
 msgid "new context"
 msgstr ""
 
-#: lib/memex_web/live/note_live/index.html.heex:56
+#: lib/memex_web/live/note_live/index.html.heex:58
 #, elixir-autogen, elixir-format
 msgid "new note"
 msgstr ""
 
-#: lib/memex_web/live/pipeline_live/index.html.heex:56
+#: lib/memex_web/live/pipeline_live/index.html.heex:58
 #, elixir-autogen, elixir-format
 msgid "new pipeline"
 msgstr ""
diff --git a/priv/gettext/prompts.pot b/priv/gettext/prompts.pot
index a56690a..31359f8 100644
--- a/priv/gettext/prompts.pot
+++ b/priv/gettext/prompts.pot
@@ -141,12 +141,12 @@ msgstr ""
 msgid "are you sure you want to make %{invite_name} unlimited?"
 msgstr ""
 
-#: lib/memex_web/live/context_live/index.html.heex:44
-#: lib/memex_web/live/context_live/show.html.heex:34
-#: lib/memex_web/live/note_live/index.html.heex:44
-#: lib/memex_web/live/note_live/show.html.heex:34
-#: lib/memex_web/live/pipeline_live/index.html.heex:44
-#: lib/memex_web/live/pipeline_live/show.html.heex:34
+#: lib/memex_web/live/context_live/index.html.heex:46
+#: lib/memex_web/live/context_live/show.html.heex:35
+#: lib/memex_web/live/note_live/index.html.heex:46
+#: lib/memex_web/live/note_live/show.html.heex:35
+#: lib/memex_web/live/pipeline_live/index.html.heex:46
+#: lib/memex_web/live/pipeline_live/show.html.heex:35
 #, elixir-autogen, elixir-format
 msgid "are you sure?"
 msgstr ""