From 28fbcac11ec58adcaca58fdee22cd4b04a8a35c6 Mon Sep 17 00:00:00 2001
From: janzenisaac <50783505+janzenisaac@users.noreply.github.com>
Date: Mon, 15 Nov 2021 09:58:48 -0600
Subject: [PATCH] FIX: Update Re-assign view permissions (#241)

Only show mobile re-assign options if user has permission to assign

Fixes: https://meta.discourse.org/t/discourse-assign/58044/155?u=isaacjanzen
---
 .../initializers/extend-for-assigns.js.es6            | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/assets/javascripts/discourse-assign/initializers/extend-for-assigns.js.es6 b/assets/javascripts/discourse-assign/initializers/extend-for-assigns.js.es6
index 01916ac..5e7ed28 100644
--- a/assets/javascripts/discourse-assign/initializers/extend-for-assigns.js.es6
+++ b/assets/javascripts/discourse-assign/initializers/extend-for-assigns.js.es6
@@ -238,7 +238,7 @@ function registerTopicFooterButtons(api) {
     dependentKeys: DEPENDENT_KEYS,
     displayed() {
       // only display the button in the mobile view
-      return this.site.mobileView;
+      return this.currentUser?.can_assign && this.site.mobileView;
     },
   });
 
@@ -282,7 +282,11 @@ function registerTopicFooterButtons(api) {
     dependentKeys: DEPENDENT_KEYS,
     displayed() {
       // only display the button in the mobile view
-      return this.site.mobileView && this.topic.isAssigned();
+      return (
+        this.currentUser?.can_assign &&
+        this.site.mobileView &&
+        this.topic.isAssigned()
+      );
     },
   });
 
@@ -328,6 +332,7 @@ function registerTopicFooterButtons(api) {
       return (
         // only display the button in the mobile view
         this.site.mobileView &&
+        this.currentUser?.can_assign &&
         this.topic.isAssigned() &&
         this.get("topic.assigned_to_user")?.username !==
           this.currentUser.username
@@ -373,7 +378,7 @@ function registerTopicFooterButtons(api) {
     dependentKeys: DEPENDENT_KEYS,
     displayed() {
       // only display the button in the mobile view
-      return this.site.mobileView;
+      return this.currentUser?.can_assign && this.site.mobileView;
     },
   });
 }