From 1bbeef7a472a1ed1b340056a905875144d11d318 Mon Sep 17 00:00:00 2001
From: RNL <lirunnan90@gmail.com>
Date: Sat, 8 Aug 2026 23:33:09 +1000
Subject: [PATCH] fix(templates): grey out filament write controls for
 read-only viewers

RAE is adding a 'friend' access tier that can view the filament inventory
but not modify it. These buttons already conditionally render on
{% if not is_basic_user %}; this adds a parallel can_write check so a
read-only-but-not-basic viewer sees Add/Edit/Delete/Manage Colors as
visibly disabled (with a tooltip) rather than fully hidden or, worse,
clickable.
---
 bambu_run/templates/bambu_run/filament_color_list.html | 6 +++---
 bambu_run/templates/bambu_run/filament_detail.html     | 2 +-
 bambu_run/templates/bambu_run/filament_list.html       | 4 ++--
 bambu_run/templates/bambu_run/filament_type_list.html  | 6 +++---
 4 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/bambu_run/templates/bambu_run/filament_color_list.html b/bambu_run/templates/bambu_run/filament_color_list.html
index a3189ce..5e9cfc9 100644
--- a/bambu_run/templates/bambu_run/filament_color_list.html
+++ b/bambu_run/templates/bambu_run/filament_color_list.html
@@ -10,7 +10,7 @@
         </div>
         <div class="col-md-4 text-end">
             {% if not is_basic_user %}
-            <a href="{% url 'bambu_run:filament_color_create' %}" class="btn btn-primary">
+            <a href="{% url 'bambu_run:filament_color_create' %}" class="btn btn-primary{% if not can_write %} disabled" aria-disabled="true" tabindex="-1" title="Read-only access{% endif %}">
                 <i class="bi bi-plus-circle"></i> Add New Color
             </a>
             {% endif %}
@@ -81,8 +81,8 @@
                             <td class="align-middle">{{ color.brand }}</td>
                             <td class="align-middle">
                                 {% if not is_basic_user %}
-                                <a href="{% url 'bambu_run:filament_color_update' color.pk %}" class="btn btn-sm btn-warning">Edit</a>
-                                <a href="{% url 'bambu_run:filament_color_delete' color.pk %}" class="btn btn-sm btn-danger">Delete</a>
+                                <a href="{% url 'bambu_run:filament_color_update' color.pk %}" class="btn btn-sm btn-warning{% if not can_write %} disabled" aria-disabled="true" tabindex="-1" title="Read-only access{% endif %}">Edit</a>
+                                <a href="{% url 'bambu_run:filament_color_delete' color.pk %}" class="btn btn-sm btn-danger{% if not can_write %} disabled" aria-disabled="true" tabindex="-1" title="Read-only access{% endif %}">Delete</a>
                                 {% endif %}
                             </td>
                         </tr>
diff --git a/bambu_run/templates/bambu_run/filament_detail.html b/bambu_run/templates/bambu_run/filament_detail.html
index b0a0679..d1bfde6 100644
--- a/bambu_run/templates/bambu_run/filament_detail.html
+++ b/bambu_run/templates/bambu_run/filament_detail.html
@@ -14,7 +14,7 @@
         </div>
         <div class="col-auto">
             {% if not is_basic_user %}
-            <a href="{% url 'bambu_run:filament_update' filament.pk %}" class="btn btn-warning">Edit</a>
+            <a href="{% url 'bambu_run:filament_update' filament.pk %}" class="btn btn-warning{% if not can_write %} disabled" aria-disabled="true" tabindex="-1" title="Read-only access{% endif %}">Edit</a>
             {% endif %}
             <a href="{% url 'bambu_run:filament_list' %}" class="btn btn-secondary">Back to List</a>
         </div>
diff --git a/bambu_run/templates/bambu_run/filament_list.html b/bambu_run/templates/bambu_run/filament_list.html
index e77cb7e..24af472 100644
--- a/bambu_run/templates/bambu_run/filament_list.html
+++ b/bambu_run/templates/bambu_run/filament_list.html
@@ -20,7 +20,7 @@
             <a href="{% url 'bambu_run:filament_color_list' %}" class="btn btn-outline-info me-2">
                 <i class="bi bi-palette"></i> Manage Colors
             </a>
-            <a href="{% url 'bambu_run:filament_create' %}" class="btn btn-primary">
+            <a href="{% url 'bambu_run:filament_create' %}" class="btn btn-primary{% if not can_write %} disabled" aria-disabled="true" tabindex="-1" title="Read-only access{% endif %}">
                 <i class="bi bi-plus-circle"></i> Add Filament
             </a>
         </div>
@@ -177,7 +177,7 @@
                             <td class="align-middle">
                                 <a href="{% url 'bambu_run:filament_detail' filament.pk %}" class="btn btn-sm btn-info">View</a>
                                 {% if not is_basic_user %}
-                                <a href="{% url 'bambu_run:filament_update' filament.pk %}" class="btn btn-sm btn-warning">Edit</a>
+                                <a href="{% url 'bambu_run:filament_update' filament.pk %}" class="btn btn-sm btn-warning{% if not can_write %} disabled" aria-disabled="true" tabindex="-1" title="Read-only access{% endif %}">Edit</a>
                                 {% endif %}
                             </td>
                         </tr>
diff --git a/bambu_run/templates/bambu_run/filament_type_list.html b/bambu_run/templates/bambu_run/filament_type_list.html
index b112cbc..1ec0244 100644
--- a/bambu_run/templates/bambu_run/filament_type_list.html
+++ b/bambu_run/templates/bambu_run/filament_type_list.html
@@ -10,7 +10,7 @@
         </div>
         <div class="col-md-4 text-end">
             {% if not is_basic_user %}
-            <a href="{% url 'bambu_run:filament_type_create' %}" class="btn btn-primary">
+            <a href="{% url 'bambu_run:filament_type_create' %}" class="btn btn-primary{% if not can_write %} disabled" aria-disabled="true" tabindex="-1" title="Read-only access{% endif %}">
                 <i class="bi bi-plus-circle"></i> Add New Type
             </a>
             {% endif %}
@@ -63,8 +63,8 @@
                             <td class="align-middle">{{ ft.brand }}</td>
                             <td class="align-middle">
                                 {% if not is_basic_user %}
-                                <a href="{% url 'bambu_run:filament_type_update' ft.pk %}" class="btn btn-sm btn-warning">Edit</a>
-                                <a href="{% url 'bambu_run:filament_type_delete' ft.pk %}" class="btn btn-sm btn-danger">Delete</a>
+                                <a href="{% url 'bambu_run:filament_type_update' ft.pk %}" class="btn btn-sm btn-warning{% if not can_write %} disabled" aria-disabled="true" tabindex="-1" title="Read-only access{% endif %}">Edit</a>
+                                <a href="{% url 'bambu_run:filament_type_delete' ft.pk %}" class="btn btn-sm btn-danger{% if not can_write %} disabled" aria-disabled="true" tabindex="-1" title="Read-only access{% endif %}">Delete</a>
                                 {% endif %}
                             </td>
                         </tr>