1) Editors cannot edit content #19

2) Improve UI to indicate that only existing users can be added. #20

src/Squidex/Controllers/Api/Apps/AppLanguagesController.cs

@@ -26,7 +26,6 @@ namespace Squidex.Controllers.Api.Apps
     /// <summary>
     /// Manages and configures apps.
     /// </summary>
-    [Authorize(Roles = SquidexRoles.AppOwner)]
     [ApiExceptionFilter]
     [ServiceFilter(typeof(AppFilterAttribute))]
     [SwaggerTag("Apps")]
@@ -48,6 +47,7 @@ namespace Squidex.Controllers.Api.Apps
         /// 200 => Language configuration returned.
         /// 404 => App not found.
         /// </returns>
+        [Authorize(Roles = SquidexRoles.AppEditor)]
         [HttpGet]
         [Route("apps/{app}/languages/")]
         [ProducesResponseType(typeof(LanguageDto[]), 200)]
@@ -82,6 +82,7 @@ namespace Squidex.Controllers.Api.Apps
         /// 400 => Language is an invalid language.
         /// 404 => App not found.
         /// </returns>
+        [Authorize(Roles = SquidexRoles.AppOwner)]
         [HttpPost]
         [Route("apps/{app}/languages/")]
         [ProducesResponseType(typeof(AppLanguageDto), 201)]
@@ -106,6 +107,7 @@ namespace Squidex.Controllers.Api.Apps
         /// 400 => Language is an invalid language.
         /// 404 => App not found.
         /// </returns>
+        [Authorize(Roles = SquidexRoles.AppOwner)]
         [HttpPut]
         [Route("apps/{app}/languages/{language}")]
         public async Task<IActionResult> Update(string app, string language, [FromBody] UpdateAppLanguageDto model)
@@ -128,6 +130,7 @@ namespace Squidex.Controllers.Api.Apps
         /// 400 => Language is an invalid language.
         /// 404 => App not found.
         /// </returns>
+        [Authorize(Roles = SquidexRoles.AppOwner)]
         [HttpDelete]
         [Route("apps/{app}/languages/{language}")]
         public async Task<IActionResult> DeleteLanguage(string app, string language)

src/Squidex/app/features/settings/pages/contributors/contributors-page.component.html

@@ -69,8 +69,8 @@
             
             <div class="table-items-footer">
                 <form class="form-inline" [formGroup]="addContributorForm" (ngSubmit)="assignContributor()">
-                    <div class="form-group mr-2">
+                    <div class="form-group mr-3">
-                        <sqx-autocomplete [source]="usersDataSource" formControlName="user" [inputName]="'contributor'"></sqx-autocomplete>
+                        <sqx-autocomplete [source]="usersDataSource" formControlName="user" [inputName]="'contributor'" placeholder="Find existing user"></sqx-autocomplete>
                     </div>
 
                     <button type="submit" class="btn btn-success" [disabled]="!addContributorForm.valid">Add Contributor</button>

src/Squidex/app/framework/angular/autocomplete.component.html

@@ -1,5 +1,5 @@
 <span>
-    <input type="text" class="form-control" (blur)="blur()" [attr.name]="inputName" (keydown)="onKeyDown($event)" (blur)="markTouched()"
+    <input type="text" class="form-control" (blur)="blur()" [attr.name]="inputName" (keydown)="onKeyDown($event)" (blur)="markTouched()" [attr.placeholder]="placeholder"
         [formControl]="queryInput"
         autocomplete="off" 
         autocorrect="off"

src/Squidex/app/framework/angular/autocomplete.component.ts

@@ -49,6 +49,9 @@ export class AutocompleteComponent implements ControlValueAccessor, OnDestroy, O
     @Input()
     public inputName = 'autocompletion';
 
+    @Input()
+    public placeholder = '';
+
     public items: AutocompleteItem[] = [];
     public itemSelection = -1;