From 122830a3f58adebe366c855037b951473c2c814a Mon Sep 17 00:00:00 2001
From: Stan Runge <stan@stanrunge.dev>
Date: Mon, 24 Feb 2025 20:18:06 +0100
Subject: [PATCH] disable editing when not logged in

---
 packages/web/src/routes/progress/[id]/+page.server.ts |  5 +++--
 packages/web/src/routes/progress/[id]/+page.svelte    | 10 +++++++---
 2 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/packages/web/src/routes/progress/[id]/+page.server.ts b/packages/web/src/routes/progress/[id]/+page.server.ts
index 3683783..b2b4011 100755
--- a/packages/web/src/routes/progress/[id]/+page.server.ts
+++ b/packages/web/src/routes/progress/[id]/+page.server.ts
@@ -2,7 +2,7 @@ import { db } from '$lib/db';
 import { tasks, tasksToTopics, topics } from '$lib/db/schema';
 import { eq, and } from 'drizzle-orm';
 
-export const load = async ({ params }) => {
+export const load = async ({ cookies, params }) => {
 	return {
 		task: await db.query.tasks.findFirst({
 			with: {
@@ -14,7 +14,8 @@ export const load = async ({ params }) => {
 			},
 			where: eq(tasks.id, params.id)
 		}),
-		topics: await db.query.topics.findMany()
+		topics: await db.query.topics.findMany(),
+		editable: cookies.get('token')
 	};
 };
 
diff --git a/packages/web/src/routes/progress/[id]/+page.svelte b/packages/web/src/routes/progress/[id]/+page.svelte
index 4a77d41..1586adf 100755
--- a/packages/web/src/routes/progress/[id]/+page.svelte
+++ b/packages/web/src/routes/progress/[id]/+page.svelte
@@ -37,9 +37,11 @@
 
 		<Popover.Root bind:open>
 			<Popover.Trigger bind:this={triggerRef}>
-				<Button variant="outline" class="justify-between" role="combobox" aria-expanded={open}>
-					+
-				</Button>
+				{#if data.editable}
+					<Button variant="outline" class="justify-between" role="combobox" aria-expanded={open}>
+						+
+					</Button>
+				{/if}
 			</Popover.Trigger>
 			<Popover.Content class="w-[200px] p-0">
 				<Command.Root>
@@ -126,6 +128,7 @@
 				value={data.task?.currentPoints}
 				class="w-20 p-2 border rounded"
 				min="0"
+				readonly={!data.editable}
 				onchange={(e) => e.target.form?.submit()}
 			/>
 
@@ -139,6 +142,7 @@
 				name="totalPoints"
 				value={data.task?.totalPoints}
 				class="w-20 p-2 border rounded"
+				readonly={!data.editable}
 				min="1"
 				onchange={(e) => e.target.form?.submit()}
 			/>