From 6a5608d8fd8e4899a91cbfb295f3f22bde39c45d Mon Sep 17 00:00:00 2001
From: einhornimmond <info@einhornimmond.de>
Date: Tue, 18 Feb 2025 09:13:11 +0100
Subject: [PATCH] only admin can create, edit or delete project_branding
 entries

---
 .../ProjectBranding/ProjectBrandingItem.vue          | 12 ++++++++++--
 admin/src/pages/ProjectBranding.vue                  |  7 ++++++-
 2 files changed, 16 insertions(+), 3 deletions(-)

diff --git a/admin/src/components/ProjectBranding/ProjectBrandingItem.vue b/admin/src/components/ProjectBranding/ProjectBrandingItem.vue
index 2c8224ec1..b94aa19cc 100644
--- a/admin/src/components/ProjectBranding/ProjectBrandingItem.vue
+++ b/admin/src/components/ProjectBranding/ProjectBrandingItem.vue
@@ -1,6 +1,6 @@
 <template>
   <div class="project-branding-item">
-    <BRow :title="item.description" @click="details = !details">
+    <BRow :title="item.description" @click="toggleDetails">
       <BCol cols="3">
         {{ item.name }}
         <br />
@@ -27,7 +27,7 @@
       <BCol cols="3" class="me-2">
         <img class="img-fluid" :src="item.logoUrl" :alt="item.logoUrl" />
       </BCol>
-      <BCol cols="1">
+      <BCol v-if="store.state.moderator.roles.includes('ADMIN')" cols="1">
         <BButton v-b-tooltip.hover variant="danger" :title="$t('delete')" @click.stop="deleteItem">
           <i class="fas fa-trash-alt"></i>
         </BButton>
@@ -47,12 +47,14 @@
 import { computed, ref, toRefs } from 'vue'
 import ProjectBrandingForm from './ProjectBrandingForm.vue'
 import { useI18n } from 'vue-i18n'
+import { useStore } from 'vuex'
 import { useMutation } from '@vue/apollo-composable'
 import CONFIG from '@/config'
 import gql from 'graphql-tag'
 import { useAppToast } from '@/composables/useToast'
 
 const { t } = useI18n()
+const store = useStore()
 const { toastSuccess, toastError } = useAppToast()
 
 const props = defineProps({
@@ -78,6 +80,12 @@ async function copyToClipboard(text) {
   }
 }
 
+function toggleDetails() {
+  if (store.state.moderator.roles.includes('ADMIN')) {
+    details.value = !details.value
+  }
+}
+
 function update(form) {
   details.value = false
   const { mutate } = useMutation(gql`
diff --git a/admin/src/pages/ProjectBranding.vue b/admin/src/pages/ProjectBranding.vue
index 1b1e3182e..2718ae478 100644
--- a/admin/src/pages/ProjectBranding.vue
+++ b/admin/src/pages/ProjectBranding.vue
@@ -4,6 +4,7 @@
       <span class="h2">{{ $t('projectBranding.title') }}</span>
       <div>
         <BButton
+          v-if="store.state.moderator.roles.includes('ADMIN')"
           variant="primary"
           data-test="project-branding-add-btn"
           font-scale="2"
@@ -32,7 +33,9 @@
           {{ $t('projectBranding.newUserToSpace') }}
         </BCol>
         <BCol cols="3">{{ $t('logo') }}</BCol>
-        <BCol cols="1">{{ $t('actions') }}</BCol>
+        <BCol v-if="store.state.moderator.roles.includes('ADMIN')" cols="1">
+          {{ $t('actions') }}
+        </BCol>
       </BRow>
       <BListGroupItem v-for="item in projectBrandings" :key="item.id">
         <project-branding-item
@@ -48,10 +51,12 @@
 <script setup>
 import { computed, watch, ref } from 'vue'
 import { useQuery } from '@vue/apollo-composable'
+import { useStore } from 'vuex'
 import { useAppToast } from '@/composables/useToast'
 import gql from 'graphql-tag'
 
 const { toastError } = useAppToast()
+const store = useStore()
 
 const { result, loading, refetch, error } = useQuery(
   gql`