marcel/familienarchiv
1
0
Fork 0
Code Issues 107 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

fix(conversations): hide new document link for read-only users

Browse Source 
The link navigates to a page that requires WRITE_ALL. Guard it with
data.canWrite (supplied by the layout) so read-only users never see a
link that leads to a 403.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Marcel
2026-03-20 16:31:21 +01:00
parent aa127de9bd
commit e2874528cd
1 changed files with 13 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
frontend/src/routes/conversations/+page.svelte
View File

@@ -225,6 +225,7 @@ const enrichedDocuments = $derived(
{data.documents.length} {data.documents.length}
</p> </p>
{/if} {/if}
{#if data.canWrite}
<a <a
data-testid="conv-new-doc-link" data-testid="conv-new-doc-link"
href="/documents/new?senderId={senderId}&receiverId={receiverId}" href="/documents/new?senderId={senderId}&receiverId={receiverId}"
@@ -236,6 +237,7 @@ const enrichedDocuments = $derived(
</svg> </svg>
{m.conv_new_doc_link()} {m.conv_new_doc_link()}
</a> </a>
{/if}
</div> </div>
<!-- CHAT CONTAINER --> <!-- CHAT CONTAINER -->