fix(delete-project): ensure user is creator of project

Author: OliverDudgeon

features/ProjectStats/ProjectActions/ProjectActions.tsx

@@ -10,14 +10,20 @@ import { DeleteProjectButton } from "./DeleteProjectButton";
 
 export interface ProjectActionsProps {
   projectId: NonNullable<ProjectId>;
+  isCreator: boolean;
   isAdministrator: boolean;
   isEditor: boolean;
 }
 
 /**
  * Table cell with edit and delete actions for provided project product.
  */
-export const ProjectActions = ({ projectId, isAdministrator, isEditor }: ProjectActionsProps) => {
+export const ProjectActions = ({
+  projectId,
+  isCreator,
+  isAdministrator,
+  isEditor,
+}: ProjectActionsProps) => {
   const { data: project, isLoading } = useGetProject(projectId);
 
   if (isLoading) {
@@ -28,7 +34,7 @@ export const ProjectActions = ({ projectId, isAdministrator, isEditor }: Project
     <Box display="flex">
       <OpenProjectButton projectId={projectId} />
       {(isEditor || isAdministrator) && <EditProjectButton project={project} />}
-      {(isEditor || isAdministrator) && <DeleteProjectButton project={project} />}
+      {isCreator && <DeleteProjectButton project={project} />}
       {(isEditor || isAdministrator) && <ChargesLinkIconButton productId={project.product_id} />}
     </Box>
   ) : null;

features/ProjectStats/ProjectStatsSection.tsx

@@ -113,6 +113,7 @@ export const ProjectStatsSection = ({ userFilter }: ProjectStatsSectionProps) =>
         cell: ({ row }) => (
           <ProjectActions
             isAdministrator={!!user.username && row.original.administrators.includes(user.username)}
+            isCreator={!!user.username && row.original.creator === user.username}
             isEditor={!!user.username && row.original.editors.includes(user.username)}
             projectId={row.original.project_id}
           />