Apply UI Authorization to Existing LiveViews closes #400 #403

Merged
moritz merged 13 commits from feature/400_ui_authorization into main 2026-02-03 17:30:16 +01:00
2 changed files with 21 additions and 13 deletions
Showing only changes of commit 505e31653a - Show all commits

View file

@ -23,9 +23,11 @@
<.icon name="hero-envelope" /> <.icon name="hero-envelope" />
{gettext("Open in email program")} {gettext("Open in email program")}
</.button> </.button>
<.button variant="primary" navigate={~p"/members/new"}> <%= if can?(@current_user, :create, Mv.Membership.Member) do %>
<.icon name="hero-plus" /> {gettext("New Member")} <.button variant="primary" navigate={~p"/members/new"}>
</.button> <.icon name="hero-plus" /> {gettext("New Member")}
</.button>
<% end %>
</:actions> </:actions>
</.header> </.header>
@ -297,16 +299,20 @@
<.link navigate={~p"/members/#{member}"}>{gettext("Show")}</.link> <.link navigate={~p"/members/#{member}"}>{gettext("Show")}</.link>
</div> </div>
<.link navigate={~p"/members/#{member}/edit"}>{gettext("Edit")}</.link> <%= if can?(@current_user, :update, member) do %>
<.link navigate={~p"/members/#{member}/edit"}>{gettext("Edit")}</.link>
<% end %>
</:action> </:action>
<:action :let={member}> <:action :let={member}>
<.link <%= if can?(@current_user, :destroy, member) do %>
phx-click={JS.push("delete", value: %{id: member.id}) |> hide("#row-#{member.id}")} <.link
data-confirm={gettext("Are you sure?")} phx-click={JS.push("delete", value: %{id: member.id}) |> hide("#row-#{member.id}")}
> data-confirm={gettext("Are you sure?")}
{gettext("Delete")} >
</.link> {gettext("Delete")}
</.link>
<% end %>
</:action> </:action>
</.table> </.table>
</Layouts.app> </Layouts.app>

View file

@ -39,9 +39,11 @@ defmodule MvWeb.MemberLive.Show do
{MvWeb.Helpers.MemberHelpers.display_name(@member)} {MvWeb.Helpers.MemberHelpers.display_name(@member)}
</h1> </h1>
<.button variant="primary" navigate={~p"/members/#{@member}/edit?return_to=show"}> <%= if can?(@current_user, :update, @member) do %>
{gettext("Edit Member")} <.button variant="primary" navigate={~p"/members/#{@member}/edit?return_to=show"}>
</.button> {gettext("Edit Member")}
</.button>
<% end %>
</div> </div>
<%!-- Tab Navigation --%> <%!-- Tab Navigation --%>