only show action buttons when appropriate

lib/memex_web/live/context_live/index.ex

@@ -1,6 +1,6 @@
 defmodule MemexWeb.ContextLive.Index do
   use MemexWeb, :live_view
-  alias Memex.{Contexts, Contexts.Context}
+  alias Memex.{Accounts.User, Contexts, Contexts.Context}
 
   @impl true
   def mount(%{"search" => search}, _session, socket) do
@@ -77,4 +77,13 @@ defmodule MemexWeb.ContextLive.Index do
   defp display_contexts(%{assigns: %{search: search}} = socket) do
     socket |> assign(contexts: Contexts.list_public_contexts(search))
   end
+
+  @spec is_owner_or_admin?(Context.t(), User.t()) :: boolean()
+  defp is_owner_or_admin?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner_or_admin?(_context, %{role: :admin}), do: true
+  defp is_owner_or_admin?(_context, _other_user), do: false
+
+  @spec is_owner?(Context.t(), User.t()) :: boolean()
+  defp is_owner?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner?(_context, _other_user), do: false
 end

lib/memex_web/live/context_live/index.html.heex

@@ -30,13 +30,15 @@
       contexts={@contexts}
     >
       <:actions :let={context}>
-        <%= if @current_user do %>
+        <%= if is_owner?(context, @current_user) do %>
           <.link
             patch={Routes.context_index_path(@socket, :edit, context)}
             data-qa={"context-edit-#{context.id}"}
           >
             <%= dgettext("actions", "edit") %>
           </.link>
+        <% end %>
+        <%= if is_owner_or_admin?(context, @current_user) do %>
           <.link
             href="#"
             phx-click="delete"

lib/memex_web/live/context_live/show.ex

@@ -1,7 +1,7 @@
 defmodule MemexWeb.ContextLive.Show do
   use MemexWeb, :live_view
 
-  alias Memex.Contexts
+  alias Memex.{Accounts.User, Contexts, Contexts.Context}
 
   @impl true
   def mount(_params, _session, socket) do
@@ -38,4 +38,13 @@ defmodule MemexWeb.ContextLive.Show do
 
   defp page_title(:show), do: gettext("show context")
   defp page_title(:edit), do: gettext("edit context")
+
+  @spec is_owner_or_admin?(Context.t(), User.t()) :: boolean()
+  defp is_owner_or_admin?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner_or_admin?(_context, %{role: :admin}), do: true
+  defp is_owner_or_admin?(_context, _other_user), do: false
+
+  @spec is_owner?(Context.t(), User.t()) :: boolean()
+  defp is_owner?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner?(_context, _other_user), do: false
 end

lib/memex_web/live/context_live/show.html.heex

@@ -19,14 +19,15 @@
   </p>
 
   <div class="self-end flex space-x-4">
-    <.link class="btn btn-primary" patch={Routes.context_index_path(@socket, :index)}>
+    <.link class="btn btn-primary" navigate={Routes.context_index_path(@socket, :index)}>
       <%= dgettext("actions", "back") %>
     </.link>
-    <%= if @current_user do %>
+    <%= if is_owner?(@context, @current_user) do %>
       <.link class="btn btn-primary" patch={Routes.context_show_path(@socket, :edit, @context)}>
         <%= dgettext("actions", "edit") %>
       </.link>
-
+    <% end %>
+    <%= if is_owner_or_admin?(@context, @current_user) do %>
       <button
         type="button"
         class="btn btn-primary"

lib/memex_web/live/note_live/index.ex

@@ -1,6 +1,6 @@
 defmodule MemexWeb.NoteLive.Index do
   use MemexWeb, :live_view
-  alias Memex.{Notes, Notes.Note}
+  alias Memex.{Accounts.User, Notes, Notes.Note}
 
   @impl true
   def mount(%{"search" => search}, _session, socket) do
@@ -76,4 +76,13 @@ defmodule MemexWeb.NoteLive.Index do
   defp display_notes(%{assigns: %{search: search}} = socket) do
     socket |> assign(notes: Notes.list_public_notes(search))
   end
+
+  @spec is_owner_or_admin?(Note.t(), User.t()) :: boolean()
+  defp is_owner_or_admin?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner_or_admin?(_context, %{role: :admin}), do: true
+  defp is_owner_or_admin?(_context, _other_user), do: false
+
+  @spec is_owner?(Note.t(), User.t()) :: boolean()
+  defp is_owner?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner?(_context, _other_user), do: false
 end

lib/memex_web/live/note_live/index.html.heex

@@ -30,13 +30,15 @@
       notes={@notes}
     >
       <:actions :let={note}>
-        <%= if @current_user do %>
+        <%= if is_owner?(note, @current_user) do %>
           <.link
             patch={Routes.note_index_path(@socket, :edit, note)}
             data-qa={"note-edit-#{note.id}"}
           >
             <%= dgettext("actions", "edit") %>
           </.link>
+        <% end %>
+        <%= if is_owner_or_admin?(note, @current_user) do %>
           <.link
             href="#"
             phx-click="delete"

lib/memex_web/live/note_live/show.ex

@@ -1,7 +1,7 @@
 defmodule MemexWeb.NoteLive.Show do
   use MemexWeb, :live_view
 
-  alias Memex.Notes
+  alias Memex.{Accounts.User, Notes, Notes.Note}
 
   @impl true
   def mount(_params, _session, socket) do
@@ -38,4 +38,13 @@ defmodule MemexWeb.NoteLive.Show do
 
   defp page_title(:show), do: gettext("show note")
   defp page_title(:edit), do: gettext("edit note")
+
+  @spec is_owner_or_admin?(Note.t(), User.t()) :: boolean()
+  defp is_owner_or_admin?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner_or_admin?(_context, %{role: :admin}), do: true
+  defp is_owner_or_admin?(_context, _other_user), do: false
+
+  @spec is_owner?(Note.t(), User.t()) :: boolean()
+  defp is_owner?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner?(_context, _other_user), do: false
 end

lib/memex_web/live/note_live/show.html.heex

@@ -19,14 +19,15 @@
   </p>
 
   <div class="self-end flex space-x-4">
-    <.link class="btn btn-primary" patch={Routes.note_index_path(@socket, :index)}>
+    <.link class="btn btn-primary" navigate={Routes.note_index_path(@socket, :index)}>
       <%= dgettext("actions", "back") %>
     </.link>
-    <%= if @current_user do %>
+    <%= if is_owner?(@note, @current_user) do %>
       <.link class="btn btn-primary" patch={Routes.note_show_path(@socket, :edit, @note)}>
         <%= dgettext("actions", "edit") %>
       </.link>
-
+    <% end %>
+    <%= if is_owner_or_admin?(@note, @current_user) do %>
       <button
         type="button"
         class="btn btn-primary"

lib/memex_web/live/pipeline_live/index.ex

@@ -1,6 +1,6 @@
 defmodule MemexWeb.PipelineLive.Index do
   use MemexWeb, :live_view
-  alias Memex.{Pipelines, Pipelines.Pipeline}
+  alias Memex.{Accounts.User, Pipelines, Pipelines.Pipeline}
 
   @impl true
   def mount(%{"search" => search}, _session, socket) do
@@ -77,4 +77,13 @@ defmodule MemexWeb.PipelineLive.Index do
   defp display_pipelines(%{assigns: %{search: search}} = socket) do
     socket |> assign(pipelines: Pipelines.list_public_pipelines(search))
   end
+
+  @spec is_owner_or_admin?(Pipeline.t(), User.t()) :: boolean()
+  defp is_owner_or_admin?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner_or_admin?(_context, %{role: :admin}), do: true
+  defp is_owner_or_admin?(_context, _other_user), do: false
+
+  @spec is_owner?(Pipeline.t(), User.t()) :: boolean()
+  defp is_owner?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner?(_context, _other_user), do: false
 end

lib/memex_web/live/pipeline_live/index.html.heex

@@ -30,13 +30,15 @@
       pipelines={@pipelines}
     >
       <:actions :let={pipeline}>
-        <%= if @current_user do %>
+        <%= if is_owner?(pipeline, @current_user) do %>
           <.link
             patch={Routes.pipeline_index_path(@socket, :edit, pipeline)}
             data-qa={"pipeline-edit-#{pipeline.id}"}
           >
             <%= dgettext("actions", "edit") %>
           </.link>
+        <% end %>
+        <%= if is_owner_or_admin?(pipeline, @current_user) do %>
           <.link
             href="#"
             phx-click="delete"

lib/memex_web/live/pipeline_live/show.ex

@@ -1,7 +1,7 @@
 defmodule MemexWeb.PipelineLive.Show do
   use MemexWeb, :live_view
 
-  alias Memex.Pipelines
+  alias Memex.{Accounts.User, Pipelines, Pipelines.Pipeline}
 
   @impl true
   def mount(_params, _session, socket) do
@@ -38,4 +38,13 @@ defmodule MemexWeb.PipelineLive.Show do
 
   defp page_title(:show), do: gettext("show pipeline")
   defp page_title(:edit), do: gettext("edit pipeline")
+
+  @spec is_owner_or_admin?(Pipeline.t(), User.t()) :: boolean()
+  defp is_owner_or_admin?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner_or_admin?(_context, %{role: :admin}), do: true
+  defp is_owner_or_admin?(_context, _other_user), do: false
+
+  @spec is_owner?(Pipeline.t(), User.t()) :: boolean()
+  defp is_owner?(%{user_id: user_id}, %{id: user_id}), do: true
+  defp is_owner?(_context, _other_user), do: false
 end

lib/memex_web/live/pipeline_live/show.html.heex

@@ -19,14 +19,15 @@
   </p>
 
   <div class="self-end flex space-x-4">
-    <.link class="btn btn-primary" patch={Routes.pipeline_index_path(@socket, :index)}>
+    <.link class="btn btn-primary" navigate={Routes.pipeline_index_path(@socket, :index)}>
       <%= dgettext("actions", "back") %>
     </.link>
-    <%= if @current_user do %>
+    <%= if is_owner?(@pipeline, @current_user) do %>
       <.link class="btn btn-primary" patch={Routes.pipeline_show_path(@socket, :edit, @pipeline)}>
         <%= dgettext("actions", "edit") %>
       </.link>
-
+    <% end %>
+    <%= if is_owner_or_admin?(@pipeline, @current_user) do %>
       <button
         type="button"
         class="btn btn-primary"