From: Johan Cwiklinski <johan@x-tnd.be>
Date: Sun, 14 Nov 2021 17:35:29 +0000 (+0100)
Subject: Resctict edit button to authorized users
X-Git-Tag: 0.9.6~49
X-Git-Url: https://git.agnieray.net/?a=commitdiff_plain;h=da064a0371a46a1cfdbbc7df905376f9b435f8d2;p=galette.git

Resctict edit button to authorized users

Fix call to plugins getDashboard
---

diff --git a/galette/templates/default/desktop.tpl b/galette/templates/default/desktop.tpl
index 4bf7f1032..f1fd475e4 100644
--- a/galette/templates/default/desktop.tpl
+++ b/galette/templates/default/desktop.tpl
@@ -38,9 +38,9 @@
     {if $login->isAdmin()}
                 <a id="prefs" href="{path_for name="preferences"}" title="{_T string="Set applications preferences (address, website, member's cards configuration, ...)"}">{_T string="Settings"}</a>
                 <a id="plugins" href="{path_for name="plugins"}" title="{_T string="Information about available plugins"}">{_T string="Plugins"}</a>
+    {/if}
                 {* Include plugins user dashboard *}
                 {$plugins->getDashboard($tpl)}
-    {/if}
 {else}
                 {* Single member *}
                 <a id="members" href="{path_for name="me"}" title="{_T string="View my member card"}">{_T string="My information"}</a>
diff --git a/galette/templates/default/gestion_adherents.tpl b/galette/templates/default/gestion_adherents.tpl
index 7d67ccc13..92c9a99b1 100644
--- a/galette/templates/default/gestion_adherents.tpl
+++ b/galette/templates/default/gestion_adherents.tpl
@@ -3,6 +3,7 @@
 
 {function name=draw_actions}
                     <td class="{$rclass} center nowrap actions_row">
+{if $member->canEdit($login)}
                         <a
                             href="{path_for name="editMember" data=["id" => $member->id]}"
                             class="tooltip action"
@@ -10,6 +11,7 @@
                             <i class="fas fa-user-edit fa-fw" aria-hidden="true"></i>
                             <span class="sr-only">{_T string="%membername: edit information" pattern="/%membername/" replace=$member->sname}</span>
                         </a>
+{/if}
 {if $login->isAdmin() or $login->isStaff()}
                         <a
                             href="{path_for name="contributions" data=["type" => "contributions", "option" => "member", "value" => $member->id]}"
diff --git a/galette/templates/default/voir_adherent.tpl b/galette/templates/default/voir_adherent.tpl
index 473ed32e4..8d3261583 100644
--- a/galette/templates/default/voir_adherent.tpl
+++ b/galette/templates/default/voir_adherent.tpl
@@ -51,6 +51,7 @@
             </li>
     {/if}
 {/if}
+{if $member->canEdit($login)}
             <li>
                 <a
                     href="{path_for name="editMember" data=["id" => $member->id]}"
@@ -61,6 +62,7 @@
                     {_T string="Modification"}
                 </a>
             </li>
+{/if}
 {if $login->isAdmin() or $login->isStaff() || $login->id eq $member->id || ($member->hasParent() and $member->parent->id eq $login->id)}
             <li>
                 <a