Apply UI authorization to Member LiveViews (Index and Show)

Gate New Member button, Edit and Delete links with can?/3.
Edit button on Member Show visible only when user can update the member.
This commit is contained in:
Moritz 2026-02-03 16:35:29 +01:00
parent 131904f172
commit f30ef4c145
2 changed files with 21 additions and 13 deletions

View file

@ -39,9 +39,11 @@ defmodule MvWeb.MemberLive.Show do
{MvWeb.Helpers.MemberHelpers.display_name(@member)}
</h1>
<.button variant="primary" navigate={~p"/members/#{@member}/edit?return_to=show"}>
{gettext("Edit Member")}
</.button>
<%= if can?(@current_user, :update, @member) do %>
<.button variant="primary" navigate={~p"/members/#{@member}/edit?return_to=show"}>
{gettext("Edit Member")}
</.button>
<% end %>
</div>
<%!-- Tab Navigation --%>