allow vorstand to see member details, Fixes #199

src/tera/admin/user.rs

@@ -19,7 +19,7 @@ use sqlx::SqlitePool;
 #[get("/user")]
 async fn index(
     db: &State<SqlitePool>,
-    admin: AdminUser,
+    user: VorstandUser,
     flash: Option<FlashMessage<'_>>,
 ) -> Template {
     let user_futures: Vec<_> = User::all(db)
@@ -28,6 +28,9 @@ async fn index(
         .map(|u| async move { UserWithRoles::from_user(u, db).await })
         .collect();
 
+    let user: User = user.into();
+    let allowed_to_edit = user.has_role(db, "admin").await;
+
     let users: Vec<UserWithRoles> = join_all(user_futures).await;
 
     let roles = Role::all(db).await;
@@ -37,13 +40,11 @@ async fn index(
     if let Some(msg) = flash {
         context.insert("flash", &msg.into_inner());
     }
+    context.insert("allowed_to_edit", &allowed_to_edit);
     context.insert("users", &users);
     context.insert("roles", &roles);
     context.insert("families", &families);
-    context.insert(
-        "loggedin_user",
-        &UserWithRoles::from_user(admin.user, db).await,
-    );
+    context.insert("loggedin_user", &UserWithRoles::from_user(user, db).await);
 
     Template::render("admin/user/index", context.into_json())
 }