allow-secretary-to-edit-boats #855

Merged
philipp merged 4 commits from allow-secretary-to-edit-boats into staging 2025-02-10 18:17:28 +01:00
6 changed files with 25 additions and 9 deletions

View File

@ -1172,6 +1172,7 @@ special_user!(VorstandUser, +"Vorstand");
special_user!(EventUser, +"manage_events");
special_user!(AllowedToEditPaymentStatusUser, +"kassier", +"admin");
special_user!(ManageUserUser, +"admin", +"schriftfuehrer");
special_user!(AdminAndSchriftfuehrerUser, +"admin", +"schriftfuehrer");
special_user!(AllowedToUpdateTripToAlwaysBeShownUser, +"admin");
#[derive(FromRow, Serialize, Deserialize, Clone, Debug)]

View File

@ -2,7 +2,7 @@ use crate::model::{
boat::{Boat, BoatToAdd, BoatToUpdate},
location::Location,
log::Log,
user::{AdminUser, User, UserWithDetails},
user::{AdminAndSchriftfuehrerUser, AdminUser, User, UserWithDetails},
};
use rocket::{
form::Form,
@ -17,7 +17,7 @@ use sqlx::SqlitePool;
#[get("/boat")]
async fn index(
db: &State<SqlitePool>,
admin: AdminUser,
admin: AdminAndSchriftfuehrerUser,
flash: Option<FlashMessage<'_>>,
) -> Template {
let boats = Boat::all(db).await;
@ -40,7 +40,11 @@ async fn index(
}
#[get("/boat/<boat>/delete")]
async fn delete(db: &State<SqlitePool>, admin: AdminUser, boat: i32) -> Flash<Redirect> {
async fn delete(
db: &State<SqlitePool>,
admin: AdminAndSchriftfuehrerUser,
boat: i32,
) -> Flash<Redirect> {
let boat = Boat::find_by_id(db, boat).await;
Log::create(db, format!("{} deleted boat: {boat:?}", admin.user.name)).await;
@ -61,7 +65,7 @@ async fn update(
db: &State<SqlitePool>,
data: Form<BoatToUpdate<'_>>,
boat_id: i32,
_admin: AdminUser,
_admin: AdminAndSchriftfuehrerUser,
) -> Flash<Redirect> {
let boat = Boat::find_by_id(db, boat_id).await;
let Some(boat) = boat else {
@ -78,7 +82,7 @@ async fn update(
async fn create(
db: &State<SqlitePool>,
data: Form<BoatToAdd<'_>>,
_admin: AdminUser,
_admin: AdminAndSchriftfuehrerUser,
) -> Flash<Redirect> {
match Boat::create(db, data.into_inner()).await {
Ok(_) => Flash::success(Redirect::to("/admin/boat"), "Boot hinzugefügt"),

View File

@ -27,7 +27,7 @@ use crate::{
},
logtype::LogType,
trip::Trip,
user::{AdminUser, DonauLinzUser, User, UserWithDetails, VorstandUser},
user::{DonauLinzUser, User, UserWithDetails, VorstandUser},
},
tera::Config,
};
@ -118,7 +118,7 @@ async fn show(db: &State<SqlitePool>, user: DonauLinzUser) -> Template {
}
#[get("/show?<year>", rank = 2)]
async fn show_for_year(db: &State<SqlitePool>, user: AdminUser, year: i32) -> Template {
async fn show_for_year(db: &State<SqlitePool>, user: VorstandUser, year: i32) -> Template {
let logs = Logbook::completed_in_year(db, year).await;
Template::render(

View File

@ -128,7 +128,7 @@ function setChoiceByLabel(choicesInstance, label) {
<a href="/admin/user"
class="block w-100 py-2 hover:text-primary-600 border-t">Userverwaltung</a>
{% endif %}
{% if "admin" in loggedin_user.roles %}
{% if "admin" in loggedin_user.roles or "schriftfuehrer" in loggedin_user.roles %}
<a href="/admin/boat"
class="block w-100 py-2 hover:text-primary-600 border-t">Boote</a>
{% endif %}

View File

@ -421,6 +421,17 @@
</ul>
</div>
{% endif %}
{% if "schriftfuehrer" in loggedin_user.roles %}
<div class="bg-white dark:bg-primary-900 text-black dark:text-white rounded-md block shadow mt-5"
role="alert">
<h2 class="h2">Schriftführer</h2>
<ul class="list-none ms-2 divide-y divide-gray-200 dark:divide-primary-600">
<li class="py-1">
<a href="/admin/boat" class="block w-100 py-2 hover:text-primary-600">Boote</a>
</li>
</ul>
</div>
{% endif %}
{% if "admin" in loggedin_user.roles %}
<div class="bg-white dark:bg-primary-900 text-black dark:text-white rounded-md block shadow mt-5"
role="alert">

View File

@ -5,7 +5,7 @@
<div class="max-w-screen-lg w-full">
<h1 class="h1">
Logbuch
{% if loggedin_user and "admin" in loggedin_user.roles %}
{% if loggedin_user and "Vorstand" in loggedin_user.roles %}
<select id="yearSelect"
onchange="changeYear()"
style="background: transparent;