From 27d853d1024b95db1f540132afa20c5382687de3 Mon Sep 17 00:00:00 2001
From: Hornwitser <github@hornwitser.no>
Date: Sat, 15 Mar 2025 14:28:27 +0100
Subject: [PATCH] Disable editing of public events in UI for crew

---
 components/EventsTable.vue | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/components/EventsTable.vue b/components/EventsTable.vue
index 8ec4f63..937e61a 100644
--- a/components/EventsTable.vue
+++ b/components/EventsTable.vue
@@ -23,12 +23,14 @@
 							<input
 								type="text"
 								:value="event.name"
+								:disabled="!canEdit(event)"
 								@input="editEvent(event, { name: ($event as any).target.value })"
 							>
 						</td>
 						<td>
 							<input
 								type="text"
+								:disabled="!canEdit(event)"
 								:value="event.description"
 								@input="editEvent(event, { description: ($event as any).target.value })"
 							>
@@ -36,6 +38,7 @@
 						<td>
 							<input
 								type="checkbox"
+								:disabled="!canEditPublic"
 								:value="!event.crew"
 								:checked="!event.crew"
 								@change="editEvent(event, { crew: !($event as any).target.value })"
@@ -45,7 +48,7 @@
 						<td>
 							<button
 								type="button"
-								:disabled="removed.has(event.id)"
+								:disabled="!canEdit(event) || removed.has(event.id)"
 								@click="delEvent(event.id)"
 							>Delete</button>
 							<button
@@ -72,6 +75,7 @@
 						<td>
 							<input
 								type="checkbox"
+								:disabled="!canEditPublic"
 								v-model="newEventPublic"
 							>
 						</td>
@@ -131,6 +135,12 @@ defineProps<{
 }>();
 
 const schedule = await useSchedule();
+const { data: session } = await useAccountSession();
+const canEditPublic = computed(() => session.value?.account.type === "admin");
+
+function canEdit(event: ScheduleEvent) {
+	return event.crew || canEditPublic.value;
+}
 
 const changes = ref<ChangeRecord<ScheduleEvent>[]>([]);
 const removed = computed(() => new Set(changes.value.filter(c => c.op === "del").map(c => c.data.id)));