Skip to content

fix: hide bounty admin actions from unauthorized users#239

Open
santoslgl01-web wants to merge 1 commit intoalgora-io:mainfrom
santoslgl01-web:fix/issue-238-hide-bounty-actions
Open

fix: hide bounty admin actions from unauthorized users#239
santoslgl01-web wants to merge 1 commit intoalgora-io:mainfrom
santoslgl01-web:fix/issue-238-hide-bounty-actions

Conversation

@santoslgl01-web
Copy link
Copy Markdown

Summary

Fixes #238

Changes

  • Hides the Edit Amount and Delete bounty actions unless the current user has an admin or mod role.
  • Keeps the existing server-side authorization checks intact for defense in depth.

Testing

  • git diff --check
  • mix format --check-formatted lib/algora_web/live/org/bounties_live.ex could not be run because this environment does not have Elixir/Mix installed.

@CLAassistant
Copy link
Copy Markdown

CLAassistant commented Apr 26, 2026

CLA assistant check
All committers have signed the CLA.

@santoslgl01-web
Copy link
Copy Markdown
Author

CLA has been signed. Could you please approve the pending workflow when you get a chance? Thank you.

@santoslgl01-web
Copy link
Copy Markdown
Author

Hi! Just checking in — please let me know if any changes are needed. Happy to update the PR. Thanks! 🙂

1 similar comment
@santoslgl01-web
Copy link
Copy Markdown
Author

Hi! Just checking in — please let me know if any changes are needed. Happy to update the PR. Thanks! 🙂

@santoslgl01-web
Copy link
Copy Markdown
Author

Hi! Just checking in again on this PR. The fix is ready from my side, and the remaining blocker appears to be maintainer-side workflow approval/review. If you'd like any code changes, I'm happy to update it. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[UI Bug] Unauthorized 'Edit' and 'Delete' buttons visible on /bounties page

2 participants