Ensure project list and pages can only be edited by leads and leadership

Author: travissouthard

html-templates/projects/project.tpl

@@ -8,8 +8,8 @@
     <div class="page-header">
         <div class="btn-toolbar pull-right">
             <div class="btn-group">
-                <a href="/projects/{$Project->Handle}/edit" class="btn btn-info">{_ "Edit Project"}</a>
-                {if $.User}
+                {if $.User->hasAccountLevel('Staff')}
+                    <a href="/projects/{$Project->Handle}/edit" class="btn btn-info">{_ "Edit Project"}</a>
                     <div class="btn-group">
                         <button class="btn btn-info dropdown-toggle" data-toggle="dropdown"><span class="caret"></span></button>
                         <div class="dropdown-menu">
@@ -23,8 +23,6 @@
                             {/if}
                         </div>
                     </div>
-                {/if}
-                {if $.User->hasAccountLevel('Staff')}
                     <a class="btn btn-danger" href="{$Project->getUrl('/delete')|escape}">Delete Project</a>
                 {/if}
             </div>
@@ -121,8 +119,8 @@
                 <div class="btn-group pull-right">
                     {if $.User && $Project->hasMember($.User)}
                         <a href="#post-update" class="btn btn-primary btn-sm" data-toggle="modal">{_ "Post Update"}</a>
+                        <a href="/project-buzz/create?ProjectID={$Project->ID}" class="btn btn-success btn-sm">{_ "Log Buzz"}</a>
                     {/if}
-                    <a href="/project-buzz/create?ProjectID={$Project->ID}" class="btn btn-success btn-sm">{_ "Log Buzz"}</a>
                 </div>
             </h2>
 
@@ -189,7 +187,9 @@
                     <li class="muted list-inline-item">{_ "No registered members"}</li>
                 {/foreach}
                 </ul>
-                <a class="btn btn-success add-person" href="#add-member" data-toggle="modal">+ {_ "Add"}</a>
+                {if $.User && $Project->hasMember($.User)}
+                    <a class="btn btn-success add-person" href="#add-member" data-toggle="modal">+ {_ "Add"}</a>
+                {/if}
             {/if}
             <hr>
 

html-templates/projects/projects.tpl

@@ -10,12 +10,10 @@
 {block content}
     <header class="page-header">
         <div class="btn-toolbar pull-right">
-            {if $.User}
+            {if $.User && $.User->hasAccountLevel('Staff')}
                 <form action="/projects/create">
                     <button class="btn btn-success" type="submit">{icon "plus"}&nbsp;{_ "Add Project&hellip;"}</button>
                 </form>
-            {else}
-                <a href="/register" class="btn btn-danger">{"Register with us!"}</a>
             {/if}
         </div>
         <h1>{_ "Civic Projects Directory"} <span class="badge badge-pill badge-secondary">{$projectsTotal|number_format}</span></h1>