#13: GUI to avoid changes by unregistered users

config/index.js

@@ -27,7 +27,8 @@ module.exports = {
         '/login': 'http://localhost:3000',
         '/logout': 'http://localhost:3000',
         '/user': 'http://localhost:3000',
-        '/groups': 'http://localhost:3000'
+        '/groups': 'http://localhost:3000',
+        '/settings': 'http://localhost:3000'
     },
     // CSS Sourcemaps off by default because relative paths are "buggy"
     // with this option, according to the CSS-Loader README

docs/DEVELOPMENT.md

@@ -13,6 +13,7 @@ These are the paths you see in the browser (VueJS does client-side routing: no r
 - /#/day/:day - show groups for the given date (in yyyy-mm-dd format)
 - /#/user/ - list of all users (only visible by admins)
 - /#/user/:id - show setting for the give user ID
+- /#/settings - global setting (only visible by admins)
 
 Web server
 ----------
@@ -33,6 +34,8 @@ Web server
 - /users/:id GET - a single user
 - /users/:id PUT - update a user
 - /users/current GET - information about the currently logged in user
+- /settings GET - get all global settings
+- /settings POST and PUT - add one or more new settings, or update existing ones
 - /login POST - login of a user
 - /logout GET - log the current user out
 

src/App.vue

@@ -9,12 +9,12 @@
                             <div class="md-title day-info-title">
                                 <md-icon class="day-icon">today</md-icon>&nbsp;{{ day.day }}
                             </div>
-                            <md-menu md-align-trigger>
+                            <md-menu v-if="loggedInUser.isAdmin || !settings.protectDayNotes" md-align-trigger>
                                 <md-button class="md-icon-button" md-menu-trigger>
                                     <md-icon>more_vert</md-icon>
                                 </md-button>
                                 <md-menu-content>
-                                    <md-menu-item @click="openNotesDialog()">
+                                    <md-menu-item v-if="loggedInUser.isAdmin || !settings.protectDayNotes" @click="openNotesDialog()">
                                         <span>edit notes</span>
                                         <md-icon>edit</md-icon>
                                     </md-menu-item>
@@ -81,15 +81,29 @@ export default {
             return {
                 dates: datesWithGroups
             };
+        },
+
+        loggedInUser() {
+            return this.$store.state.loggedInUser;
+        },
+
+        settings() {
+            return this.$store.state.settings || {};
         }
     },
 
     beforeCreate: function() {
         this.daysUrl = this.$resource('days{/day}');
         this.daysInfoUrl = this.$resource('days{/day}/info');
+        this.settingsUrl = this.$resource('settings');
     },
 
     mounted: function() {
+        this.fetchSettings(this.initialize);
+    },
+
+    methods: {
+        initialize() {
             var [year, month, day] = (this.$route.params.day || '').split('-');
             year = parseInt(year);
             month = parseInt(month) - 1;
@@ -106,7 +120,6 @@ export default {
             this.reload();
         },
 
-    methods: {
         reload() {
             var ym = this.dateToString(this.date, true);
             this.getSummary({start: ym, end: ym});
@@ -193,6 +206,21 @@ export default {
                 this.day.notes = json.notes;
                 this.reload();
             });
+        },
+
+        fetchSettings(cb) {
+            this.settingsUrl.get().then((response) => {
+                return response.json();
+            }, (response) => {
+                this.$refs.dialogObj.show({text: 'unable to fetch settings'});
+            }).then((json) => {
+                if (!json || json.error) {
+                    this.$refs.dialogObj.show({text: 'unable to fetch settings: ' + (json && json.message) || ''});
+                } else {
+                    this.$store.commit('updateSettings', json);
+                }
+                cb();
+            });
         }
     },
 

src/Attendee.vue

@@ -52,6 +52,9 @@ export default {
     computed: {
         loggedInUser() {
             return this.$store.state.loggedInUser;
+        },
+        settings() {
+            return this.$store.state.settings || {};
         }
     },
 
@@ -61,7 +64,7 @@ export default {
 
     methods: {
         isAuthorized(ownerID) {
-            return !ownerID || this.$store.state.loggedInUser.isAdmin || (this.$store.state.loggedInUser._id && this.$store.state.loggedInUser._id == ownerID);
+            return (!ownerID && !this.$store.state.settings.protectUnregistered) || this.$store.state.loggedInUser.isAdmin || (this.$store.state.loggedInUser._id && this.$store.state.loggedInUser._id == ownerID);
         },
 
         editAttendee() {

src/Group.vue

@@ -7,16 +7,16 @@
                     <div class="md-title group-title">
                         <md-icon class="group-icon">folder_open</md-icon>&nbsp;{{ group.group }}&nbsp;<span class="counter">{{ counter }}</span>
                     </div>
-                    <md-menu md-align-trigger>
+                    <md-menu v-if="loggedInUser.isAdmin || !settings.protectGroupNotes || !settings.protectGroupName" md-align-trigger>
                         <md-button class="md-icon-button" md-menu-trigger>
                             <md-icon>more_vert</md-icon>
                         </md-button>
                         <md-menu-content>
-                            <md-menu-item @click="openNotesDialog()">
+                            <md-menu-item v-if="loggedInUser.isAdmin || !settings.protectGroupNotes" @click="openNotesDialog()">
                                 <span>edit notes</span>
                                 <md-icon>edit</md-icon>
                             </md-menu-item>
-                            <md-menu-item @click="openRenameGroupDialog()">
+                            <md-menu-item v-if="loggedInUser.isAdmin || !settings.protectGroupName" @click="openRenameGroupDialog()">
                                 <span>rename group</span>
                                 <md-icon>label</md-icon>
                             </md-menu-item>
@@ -146,6 +146,9 @@ export default {
         },
         loggedInUser() {
             return this.$store.state.loggedInUser;
+        },
+        settings() {
+            return this.$store.state.settings || {};
         }
     },
 

src/Toolbar.vue

@@ -11,6 +11,10 @@
             <router-link :to="{name: 'home'}" class="home-link">ibt2</router-link>
         </h2>
         <span v-if="loggedInUser.username">
+            <md-button v-if="loggedInUser.isAdmin" id="users-icon" class="md-icon-button" @click="toSettingsPage()">
+                <md-tooltip md-direction="left">global settings</md-tooltip>
+                <md-icon>settings</md-icon>
+            </md-button>
             <md-button v-if="loggedInUser.isAdmin" id="users-icon" class="md-icon-button" @click="toUsersPage()">
                 <md-tooltip md-direction="left">list of users</md-tooltip>
                 <md-icon>people_outline</md-icon>
@@ -108,6 +112,10 @@ export default {
             this.$router.push('/user/');
         },
 
+        toSettingsPage() {
+            this.$router.push('/settings/');
+        },
+
         focusToLoginForm() {
             var that = this;
             setTimeout(function() { that.$refs.usernameInput.$el.focus(); }, 400);

src/User.vue

@@ -17,8 +17,8 @@
                 </md-input-container>
 
                 <md-switch v-if="loggedInUser.isAdmin" v-model="user.isAdmin" class="md-warn">is admin</md-switch>
-                <br />
 
+                <br />
                 <md-button id="save-button" class="md-raised md-primary" @click="save()">Save</md-button>
             </md-card-content>
         </md-card>

src/main.js

@@ -26,6 +26,7 @@ import store_data from './store.js';
 import App from './App';
 import User from './User';
 import Users from './Users';
+import GlobalSettings from './GlobalSettings';
 import Toolbar from './Toolbar';
 import IbtFooter from './IbtFooter';
 
@@ -41,7 +42,8 @@ var routes = [
     {path: '/day/', name: 'days', component: App},
     {path: '/day/:day', name: 'day', component: App},
     {path: '/user/', name: 'users', component: Users},
-    {path: '/user/:id', name: 'user', component: User}
+    {path: '/user/:id', name: 'user', component: User},
+    {path: '/settings/', name: 'settings', component: GlobalSettings},
 ];
 
 const store = new Vuex.Store(store_data);
@@ -52,5 +54,5 @@ var vue = new Vue({
     store: store,
     template: '<div id="app"><toolbar /><router-view class="view"></router-view><ibt-footer /></div>',
     router: router,
-    components: { App, Toolbar, IbtFooter, Users, User }
+    components: { App, Toolbar, IbtFooter, Users, User, GlobalSettings }
 });

src/store.js

@@ -4,14 +4,20 @@
 
 export default {
     state: {
-        loggedInUser: {username: ''}
+        loggedInUser: {username: ''},
+        settings: {}
     },
     mutations: {
         clearLoggedInUser(state, user) {
             state.loggedInUser = {username: ''};
         },
+
         setLoggedInUser(state, user) {
             state.loggedInUser = user;
+        },
+
+        updateSettings(state, settings) {
+            state.settings = settings;
         }
     }
 };