lib/mv_web/live/member_live/index.html.heex

@@ -23,9 +23,11 @@
         <.icon name="hero-envelope" />
         {gettext("Open in email program")}
       </.button>
+      <%= if can?(@current_user, :create, Mv.Membership.Member) do %>
         <.button variant="primary" navigate={~p"/members/new"}>
           <.icon name="hero-plus" /> {gettext("New Member")}
         </.button>
+      <% end %>
     </:actions>
   </.header>
 
@@ -297,16 +299,20 @@
         <.link navigate={~p"/members/#{member}"}>{gettext("Show")}</.link>
       </div>
 
+      <%= if can?(@current_user, :update, member) do %>
         <.link navigate={~p"/members/#{member}/edit"}>{gettext("Edit")}</.link>
+      <% end %>
     </:action>
 
     <:action :let={member}>
+      <%= if can?(@current_user, :destroy, member) do %>
         <.link
           phx-click={JS.push("delete", value: %{id: member.id}) |> hide("#row-#{member.id}")}
           data-confirm={gettext("Are you sure?")}
         >
           {gettext("Delete")}
         </.link>
+      <% end %>
     </:action>
   </.table>
 </Layouts.app>

lib/mv_web/live/member_live/show.ex

@@ -39,9 +39,11 @@ defmodule MvWeb.MemberLive.Show do
           {MvWeb.Helpers.MemberHelpers.display_name(@member)}
         </h1>
 
+        <%= if can?(@current_user, :update, @member) do %>
           <.button variant="primary" navigate={~p"/members/#{@member}/edit?return_to=show"}>
             {gettext("Edit Member")}
           </.button>
+        <% end %>
       </div>
 
       <%!-- Tab Navigation --%>