From 2115b009ac8af331d871e30d4c79793bb1139370 Mon Sep 17 00:00:00 2001
From: Sebastian <sebastian@squidex.io>
Date: Tue, 28 Jun 2022 12:13:22 +0200
Subject: [PATCH] Permission fixes.

---
 .../settings/pages/backups/backups-page.component.html     | 2 +-
 .../features/settings/pages/more/more-page.component.html  | 2 +-
 .../pages/workflows/workflow-transition.component.scss     | 7 -------
 .../settings/pages/workflows/workflow.component.html       | 4 +++-
 .../src/app/features/settings/settings-area.component.html | 2 +-
 frontend/src/app/shared/services/apps.service.ts           | 2 ++
 6 files changed, 8 insertions(+), 11 deletions(-)

diff --git a/frontend/src/app/features/settings/pages/backups/backups-page.component.html b/frontend/src/app/features/settings/pages/backups/backups-page.component.html
index d4da951e4..36d6c8e39 100644
--- a/frontend/src/app/features/settings/pages/backups/backups-page.component.html
+++ b/frontend/src/app/features/settings/pages/backups/backups-page.component.html
@@ -21,7 +21,7 @@
                 <div class="table-items-row table-items-row-summary table-items-row-empty" *ngIf="backups.length === 0">
                     {{ 'backups.empty' | sqxTranslate }}
     
-                    <button type="button" class="btn btn-success btn-sm me-2" (click)="start()">
+                    <button type="button" class="btn btn-success btn-sm me-2" (click)="start()" *ngIf="backupsState.canCreate | async">
                         {{ 'backups.start' | sqxTranslate }}
                     </button>
                 </div>
diff --git a/frontend/src/app/features/settings/pages/more/more-page.component.html b/frontend/src/app/features/settings/pages/more/more-page.component.html
index ee7c61500..788540e67 100644
--- a/frontend/src/app/features/settings/pages/more/more-page.component.html
+++ b/frontend/src/app/features/settings/pages/more/more-page.component.html
@@ -33,7 +33,7 @@
                         </div>
         
                         <div class="card-footer">
-                            <button type="submit" class="float-end btn btn-primary">
+                            <button type="submit" class="float-end btn btn-primary" [disabled]="!isEditable">
                                 {{ 'common.save' | sqxTranslate }}
                             </button>
                         </div>
diff --git a/frontend/src/app/features/settings/pages/workflows/workflow-transition.component.scss b/frontend/src/app/features/settings/pages/workflows/workflow-transition.component.scss
index 96776f67e..e3325c74a 100644
--- a/frontend/src/app/features/settings/pages/workflows/workflow-transition.component.scss
+++ b/frontend/src/app/features/settings/pages/workflows/workflow-transition.component.scss
@@ -10,13 +10,6 @@
     pointer-events: none;
 }
 
-.form-control {
-    &:disabled,
-    &.disabled {
-        background: $color-white;
-    }
-}
-
 .transition-to {
     @include truncate;
 }
\ No newline at end of file
diff --git a/frontend/src/app/features/settings/pages/workflows/workflow.component.html b/frontend/src/app/features/settings/pages/workflows/workflow.component.html
index 3b1c7e34d..846509fc6 100644
--- a/frontend/src/app/features/settings/pages/workflows/workflow.component.html
+++ b/frontend/src/app/features/settings/pages/workflows/workflow.component.html
@@ -61,7 +61,8 @@
                     <label class="col-form-label" for="{{workflow.id}}_name">{{ 'common.name' | sqxTranslate }}</label>
             
                     <div class="col">
-                        <input class="form-control" id="{{workflow.id}}_name" 
+                        <input class="form-control" id="{{workflow.id}}_name"
+                            [disabled]="!isEditable"
                             [ngModelOptions]="onBlur" 
                             [ngModel]="workflow.name"
                             (ngModelChange)="rename($event)">
@@ -77,6 +78,7 @@
             
                     <div class="col">
                         <sqx-tag-editor placeholder="{{ 'common.tagAddSchema' | sqxTranslate }}" [converter]="(schemasSource.converter | async)!" 
+                            [disabled]="!isEditable"
                             [ngModel]="workflow.schemaIds" 
                             (ngModelChange)="changeSchemaIds($event)" 
                             [suggestions]="(schemasSource.converter | async)?.suggestions">
diff --git a/frontend/src/app/features/settings/settings-area.component.html b/frontend/src/app/features/settings/settings-area.component.html
index 954f8bafb..b5f5104f1 100644
--- a/frontend/src/app/features/settings/settings-area.component.html
+++ b/frontend/src/app/features/settings/settings-area.component.html
@@ -25,7 +25,7 @@
             <li class="nav-item nav-heading">
                 {{ 'common.editing' | sqxTranslate }}
             </li>
-            <li class="nav-item">
+            <li class="nav-item" *ngIf="app.canReadAssetsScripts">
                 <a class="nav-link" routerLink="asset-scripts" routerLinkActive="active">
                     <i class="icon-assets"></i> {{ 'common.assetScripts' | sqxTranslate }}
                 </a>
diff --git a/frontend/src/app/shared/services/apps.service.ts b/frontend/src/app/shared/services/apps.service.ts
index 8197a6401..fceb9ed6d 100644
--- a/frontend/src/app/shared/services/apps.service.ts
+++ b/frontend/src/app/shared/services/apps.service.ts
@@ -17,6 +17,7 @@ export class AppDto {
     public readonly canCreateSchema: boolean;
     public readonly canDelete: boolean;
     public readonly canReadAssets: boolean;
+    public readonly canReadAssetsScripts: boolean;
     public readonly canReadBackups: boolean;
     public readonly canReadClients: boolean;
     public readonly canReadContributors: boolean;
@@ -55,6 +56,7 @@ export class AppDto {
         this.canCreateSchema = hasAnyLink(links, 'schemas/create');
         this.canDelete = hasAnyLink(links, 'delete');
         this.canReadAssets = hasAnyLink(links, 'assets');
+        this.canReadAssetsScripts = hasAnyLink(links, 'assets/scripts');
         this.canReadBackups = hasAnyLink(links, 'backups');
         this.canReadClients = hasAnyLink(links, 'clients');
         this.canReadContributors = hasAnyLink(links, 'contributors');