From 312af3073a607a8413095d50a61cbcfc412499d5 Mon Sep 17 00:00:00 2001
From: Sebastian Stehle <sebastian@squidex.io>
Date: Mon, 20 Nov 2017 21:47:58 +0100
Subject: [PATCH] Closes #180

---
 .../Areas/Api/Controllers/Apps/AppClientsController.cs      | 2 +-
 .../Areas/Api/Controllers/Apps/AppLanguagesController.cs    | 6 +++---
 .../app/features/settings/settings-area.component.html      | 4 ++--
 src/Squidex/app/shell/pages/app/left-menu.component.html    | 2 +-
 4 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/src/Squidex/Areas/Api/Controllers/Apps/AppClientsController.cs b/src/Squidex/Areas/Api/Controllers/Apps/AppClientsController.cs
index 7246417e5..1b97323e7 100644
--- a/src/Squidex/Areas/Api/Controllers/Apps/AppClientsController.cs
+++ b/src/Squidex/Areas/Api/Controllers/Apps/AppClientsController.cs
@@ -25,7 +25,7 @@ namespace Squidex.Areas.Api.Controllers.Apps
     [ApiAuthorize]
     [ApiExceptionFilter]
     [AppApi]
-    [MustBeAppOwner]
+    [MustBeAppEditor]
     [SwaggerTag(nameof(Apps))]
     public sealed class AppClientsController : ApiController
     {
diff --git a/src/Squidex/Areas/Api/Controllers/Apps/AppLanguagesController.cs b/src/Squidex/Areas/Api/Controllers/Apps/AppLanguagesController.cs
index f33e1288b..fc9562994 100644
--- a/src/Squidex/Areas/Api/Controllers/Apps/AppLanguagesController.cs
+++ b/src/Squidex/Areas/Api/Controllers/Apps/AppLanguagesController.cs
@@ -75,7 +75,7 @@ namespace Squidex.Areas.Api.Controllers.Apps
         /// 400 => Language is an invalid language.
         /// 404 => App not found.
         /// </returns>
-        [MustBeAppOwner]
+        [MustBeAppEditor]
         [HttpPost]
         [Route("apps/{app}/languages/")]
         [ProducesResponseType(typeof(AppLanguageDto), 201)]
@@ -101,7 +101,7 @@ namespace Squidex.Areas.Api.Controllers.Apps
         /// 400 => Language object is invalid.
         /// 404 => App not found.
         /// </returns>
-        [MustBeAppOwner]
+        [MustBeAppEditor]
         [HttpPut]
         [Route("apps/{app}/languages/{language}/")]
         [ApiCosts(1)]
@@ -121,7 +121,7 @@ namespace Squidex.Areas.Api.Controllers.Apps
         /// 204 => Language deleted.
         /// 404 => App not found.
         /// </returns>
-        [MustBeAppOwner]
+        [MustBeAppEditor]
         [HttpDelete]
         [Route("apps/{app}/languages/{language}/")]
         [ApiCosts(1)]
diff --git a/src/Squidex/app/features/settings/settings-area.component.html b/src/Squidex/app/features/settings/settings-area.component.html
index 36e78e5a5..7dd011dad 100644
--- a/src/Squidex/app/features/settings/settings-area.component.html
+++ b/src/Squidex/app/features/settings/settings-area.component.html
@@ -20,7 +20,7 @@
                         <i class="icon-angle-right"></i>
                     </a>
                 </li>
-                <li class="nav-item">
+                <li class="nav-item" *ngIf="ctx.app.permission === 'Owner'">
                     <a class="nav-link" routerLink="contributors" routerLinkActive="active">
                         Contributors
                         <i class="icon-angle-right"></i>
@@ -32,7 +32,7 @@
                         <i class="icon-angle-right"></i>
                     </a>
                 </li>
-                <li class="nav-item">
+                <li class="nav-item" *ngIf="ctx.app.permission === 'Owner'">
                     <a class="nav-link" routerLink="plans" routerLinkActive="active">
                         Update Plan
                         <i class="icon-angle-right"></i>
diff --git a/src/Squidex/app/shell/pages/app/left-menu.component.html b/src/Squidex/app/shell/pages/app/left-menu.component.html
index c882bb56d..b175bdbb4 100644
--- a/src/Squidex/app/shell/pages/app/left-menu.component.html
+++ b/src/Squidex/app/shell/pages/app/left-menu.component.html
@@ -20,7 +20,7 @@
                 <i class="nav-icon icon-rules"></i> <div class="nav-text">Rules</div>
             </a>
         </li>
-        <li class="nav-item" *ngIf="ctx.app.permission === 'Owner'">
+        <li class="nav-item" *ngIf="ctx.app.permission !== 'Editor'">
             <a class="nav-link" routerLink="settings" routerLinkActive="active">
                 <i class="nav-icon icon-settings"></i> <div class="nav-text">Settings</div>
             </a>