Apply UI authorization to Member LiveViews (Index and Show)

Gate New Member button, Edit and Delete links with can?/3.
Edit button on Member Show visible only when user can update the member.
This commit is contained in:
Moritz 2026-02-03 16:35:29 +01:00
parent d3ad7c5013
commit 505e31653a
Signed by: moritz
GPG key ID: 1020A035E5DD0824
2 changed files with 21 additions and 13 deletions

View file

@ -39,9 +39,11 @@ defmodule MvWeb.MemberLive.Show do
{MvWeb.Helpers.MemberHelpers.display_name(@member)}
</h1>
<.button variant="primary" navigate={~p"/members/#{@member}/edit?return_to=show"}>
{gettext("Edit Member")}
</.button>
<%= if can?(@current_user, :update, @member) do %>
<.button variant="primary" navigate={~p"/members/#{@member}/edit?return_to=show"}>
{gettext("Edit Member")}
</.button>
<% end %>
</div>
<%!-- Tab Navigation --%>