From 6a88ea4af5ab5414a03501b4f3d597cfe918defd Mon Sep 17 00:00:00 2001
From: "Tobias Burdow [Kaleidox]" <kaleidox@comroid.org>
Date: Wed, 20 Dec 2023 18:25:03 +0100
Subject: [PATCH] show user edit button only if user can govern target

---
 src/hub/main/resources/templates/user/view.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/hub/main/resources/templates/user/view.html b/src/hub/main/resources/templates/user/view.html
index 61d74e86..f51a87d8 100644
--- a/src/hub/main/resources/templates/user/view.html
+++ b/src/hub/main/resources/templates/user/view.html
@@ -8,7 +8,7 @@
     <div class="ui-content">
         <form action="/api/webapp/user/edit" method="post">
             <h2>User <b th:text="${target.getBestName()}"></b>
-                - <a class="ui-button" th:if="${canManageUsers}" th:href="@{'/user/edit/'+${id}}">Edit</a>
+                <div th:if="${user.canGovern(target)}"> - <a class="ui-button" th:href="@{'/user/edit/'+${id}}">Edit</a></div>
             <table>
                 <tbody>
                 <tr><td>Name</td><td><input name="name" th:readonly="${!edit}" th:value="${target.name}" type="text"></td></tr>