From 17ebd471e8f8780268de19d974d7fc4403808996 Mon Sep 17 00:00:00 2001
From: lucuswolfius <lucaswolfram23@web.de>
Date: Mon, 2 Jun 2025 10:03:59 -0700
Subject: [PATCH] hide admin elements in navbar when not permitted

---
 apps/hub/app/_components/Nav.tsx            | 79 +++++++++++++--------
 packages/database/prisma/schema/user.prisma |  1 +
 2 files changed, 51 insertions(+), 29 deletions(-)

diff --git a/apps/hub/app/_components/Nav.tsx b/apps/hub/app/_components/Nav.tsx
index 13d8c703..d9a3c1cf 100644
--- a/apps/hub/app/_components/Nav.tsx
+++ b/apps/hub/app/_components/Nav.tsx
@@ -8,8 +8,15 @@ import {
 } from "@radix-ui/react-icons";
 import Link from "next/link";
 import { WarningAlert } from "./ui/PageAlert";
+import { getServerSession } from "api/auth/[...nextauth]/auth";
+import { Error } from "./Error";
 
-export const VerticalNav = () => {
+export const VerticalNav = async () => {
+	const session = await getServerSession();
+	if (!session?.user) return <Error statusCode={401} title="Benutzer nicht authentifiziert!" />;
+	const viewAdminMenu = session.user.permissions.some((p) => {
+		return p.startsWith("ADMIN");
+	});
 	return (
 		<ul className="menu w-64 bg-base-300 p-3 rounded-lg shadow-md font-semibold">
 			<li>
@@ -35,34 +42,48 @@ export const VerticalNav = () => {
 					Einstellungen
 				</Link>
 			</li>
-			<li>
-				<details open>
-					<summary>
-						<LockClosedIcon />
-						Admin
-					</summary>
-					<ul>
-						<li>
-							<Link href="/admin/user">Benutzer</Link>
-						</li>
-						<li>
-							<Link href="/admin/station">Stationen</Link>
-						</li>
-						<li>
-							<Link href="/admin/keyword">Stichworte</Link>
-						</li>
-						<li>
-							<Link href="/admin/event">Events</Link>
-						</li>
-						<li>
-							<Link href="/admin/message">Service Nachrichten</Link>
-						</li>
-						<li>
-							<Link href="/admin/report">Reports</Link>
-						</li>
-					</ul>
-				</details>
-			</li>
+			{viewAdminMenu && (
+				<li>
+					<details open>
+						<summary>
+							<LockClosedIcon />
+							Admin
+						</summary>
+						<ul>
+							{session.user.permissions.includes("ADMIN_USER") && (
+								<li>
+									<Link href="/admin/user">Benutzer</Link>
+								</li>
+							)}
+							{session.user.permissions.includes("ADMIN_STATION") && (
+								<li>
+									<Link href="/admin/station">Stationen</Link>
+								</li>
+							)}
+							{session.user.permissions.includes("ADMIN_KEYWORD") && (
+								<li>
+									<Link href="/admin/keyword">Stichworte</Link>
+								</li>
+							)}
+							{session.user.permissions.includes("ADMIN_EVENT") && (
+								<li>
+									<Link href="/admin/event">Events</Link>
+								</li>
+							)}
+							{session.user.permissions.includes("ADMIN_MESSAGE") && (
+								<li>
+									<Link href="/admin/message">Service Nachrichten</Link>
+								</li>
+							)}
+							{session.user.permissions.includes("ADMIN_USER") && (
+								<li>
+									<Link href="/admin/report">Reports</Link>
+								</li>
+							)}
+						</ul>
+					</details>
+				</li>
+			)}
 		</ul>
 	);
 };
diff --git a/packages/database/prisma/schema/user.prisma b/packages/database/prisma/schema/user.prisma
index 797d316b..70d7df3e 100644
--- a/packages/database/prisma/schema/user.prisma
+++ b/packages/database/prisma/schema/user.prisma
@@ -14,6 +14,7 @@ enum PERMISSION {
     AUDIO_ADMIN
     ADMIN_STATION
     ADMIN_KEYWORD
+    ADMIN_MESSAGE
     AUDIO
     PILOT
     DISPO