From 8a46a933d6163524d8f0e8ee216d36dabfe6d765 Mon Sep 17 00:00:00 2001
From: freamon <f78673709@gmail.com>
Date: Mon, 15 Apr 2024 12:54:27 +0100
Subject: [PATCH] Hide 'Create Post' if Community is restricted_to_mods and
 User isn't a Mod

---
 app/post/routes.py                          | 10 +++++++---
 app/templates/community/_community_nav.html | 10 ++++++----
 app/templates/community/community.html      |  8 +++++---
 app/templates/post/add_reply.html           |  8 +++++---
 app/templates/post/continue_discussion.html |  8 +++++---
 app/templates/post/post.html                |  8 +++++---
 app/templates/post/post_reply_edit.html     |  8 +++++---
 app/templates/topic/topic_create_post.html  | 15 +++++++++++----
 app/topic/routes.py                         |  6 +++---
 9 files changed, 52 insertions(+), 29 deletions(-)

diff --git a/app/post/routes.py b/app/post/routes.py
index fab5fcd7..0f3e4665 100644
--- a/app/post/routes.py
+++ b/app/post/routes.py
@@ -15,7 +15,7 @@ from app.inoculation import inoculation
 from app.post.forms import NewReplyForm, ReportPostForm, MeaCulpaForm
 from app.community.forms import CreateLinkForm, CreateImageForm, CreateDiscussionForm
 from app.post.util import post_replies, get_comment_branch, post_reply_count
-from app.constants import SUBSCRIPTION_MEMBER, POST_TYPE_LINK, POST_TYPE_IMAGE, POST_TYPE_ARTICLE
+from app.constants import SUBSCRIPTION_MEMBER, SUBSCRIPTION_OWNER, SUBSCRIPTION_MODERATOR, POST_TYPE_LINK, POST_TYPE_IMAGE, POST_TYPE_ARTICLE
 from app.models import Post, PostReply, \
     PostReplyVote, PostVote, Notification, utcnow, UserBlock, DomainBlock, InstanceBlock, Report, Site, Community, \
     Topic, User, Instance
@@ -262,6 +262,7 @@ def show_post(post_id: int):
                            recently_upvoted_replies=recently_upvoted_replies, recently_downvoted_replies=recently_downvoted_replies,
                            etag=f"{post.id}{sort}_{hash(post.last_active)}", markdown_editor=current_user.is_authenticated and current_user.markdown_editor,
                            low_bandwidth=request.cookies.get('low_bandwidth', '0') == '1', SUBSCRIPTION_MEMBER=SUBSCRIPTION_MEMBER,
+                           SUBSCRIPTION_OWNER=SUBSCRIPTION_OWNER, SUBSCRIPTION_MODERATOR=SUBSCRIPTION_MODERATOR,
                            moderating_communities=moderating_communities(current_user.get_id()),
                            joined_communities=joined_communities(current_user.get_id()),
                            inoculation=inoculation[randint(0, len(inoculation) - 1)]
@@ -489,6 +490,7 @@ def continue_discussion(post_id, comment_id):
                            is_moderator=is_moderator, comment=comment, replies=replies, markdown_editor=current_user.is_authenticated and current_user.markdown_editor,
                            moderating_communities=moderating_communities(current_user.get_id()),
                            joined_communities=joined_communities(current_user.get_id()), community=post.community,
+                           SUBSCRIPTION_OWNER=SUBSCRIPTION_OWNER, SUBSCRIPTION_MODERATOR=SUBSCRIPTION_MODERATOR,
                            inoculation=inoculation[randint(0, len(inoculation) - 1)])
     response.headers.set('Vary', 'Accept, Cookie, Accept-Language')
     return response
@@ -674,7 +676,8 @@ def add_reply(post_id: int, comment_id: int):
         return render_template('post/add_reply.html', title=_('Discussing %(title)s', title=post.title), post=post,
                                is_moderator=is_moderator, form=form, comment=in_reply_to, markdown_editor=current_user.is_authenticated and current_user.markdown_editor,
                                moderating_communities=moderating_communities(current_user.get_id()), mods=mod_list,
-                               joined_communities = joined_communities(current_user.id),
+                               joined_communities = joined_communities(current_user.id), community=post.community,
+                               SUBSCRIPTION_OWNER=SUBSCRIPTION_OWNER, SUBSCRIPTION_MODERATOR=SUBSCRIPTION_MODERATOR,
                                inoculation=inoculation[randint(0, len(inoculation) - 1)])
 
 
@@ -1430,7 +1433,8 @@ def post_reply_edit(post_id: int, comment_id: int):
             form.notify_author.data = post_reply.notify_author
             return render_template('post/post_reply_edit.html', title=_('Edit comment'), form=form, post=post, post_reply=post_reply,
                                    comment=comment, markdown_editor=current_user.markdown_editor, moderating_communities=moderating_communities(current_user.get_id()),
-                                   joined_communities=joined_communities(current_user.get_id()),
+                                   joined_communities=joined_communities(current_user.get_id()), community=post.community,
+                                   SUBSCRIPTION_OWNER=SUBSCRIPTION_OWNER, SUBSCRIPTION_MODERATOR=SUBSCRIPTION_MODERATOR,
                                    inoculation=inoculation[randint(0, len(inoculation) - 1)])
     else:
         abort(401)
diff --git a/app/templates/community/_community_nav.html b/app/templates/community/_community_nav.html
index 860913b4..a49a9010 100644
--- a/app/templates/community/_community_nav.html
+++ b/app/templates/community/_community_nav.html
@@ -1,7 +1,9 @@
 {% if community %}
-    <div class="mobile_create_post d-md-none mt-1">
-        <a class="btn btn-primary" href="/community/{{ community.link() }}/submit">{{ _('Create post') }}</a>
-    </div>
+    {% if not community.restricted_to_mods or (community.restricted_to_mods and current_user.is_authenticated and community_membership(current_user, community) in [SUBSCRIPTION_MODERATOR, SUBSCRIPTION_OWNER]) %}
+        <div class="mobile_create_post d-md-none mt-1">
+            <a class="btn btn-primary" href="/community/{{ community.link() }}/submit">{{ _('Create post') }}</a>
+        </div>
+    {% endif %}
 {% endif %}
 <div class="btn-group mt-1 mb-2">
     <a href="?sort=hot&layout={{ post_layout }}" aria-label="{{ _('Sort by hot') }}" class="btn {{ 'btn-primary' if sort == '' or sort == 'hot' else 'btn-outline-secondary' }}" rel="nofollow noindex">
@@ -29,4 +31,4 @@
         {{ _('Wide tile') }}
     </a>
 </div>
-{% endif %}
\ No newline at end of file
+{% endif %}
diff --git a/app/templates/community/community.html b/app/templates/community/community.html
index 712758bf..b2cc9852 100644
--- a/app/templates/community/community.html
+++ b/app/templates/community/community.html
@@ -104,9 +104,11 @@
         <div class="card">
             <div class="card-body">
                 <div class="row">
-                    <div class="col-6">
-                        <a class="w-100 btn btn-primary" href="/community/{{ community.link() }}/submit" rel="nofollow">{{ _('Create post') }}</a>
-                    </div>
+                    {% if not community.restricted_to_mods or (community.restricted_to_mods and current_user.is_authenticated and community_membership(current_user, community) in [SUBSCRIPTION_MODERATOR, SUBSCRIPTION_OWNER]) %}
+                        <div class="col-6">
+                            <a class="w-100 btn btn-primary" href="/community/{{ community.link() }}/submit" rel="nofollow">{{ _('Create post') }}</a>
+                        </div>
+                    {% endif %}
                     <div class="col-6">
                         {% if current_user.is_authenticated and community_membership(current_user, community) in [SUBSCRIPTION_MEMBER, SUBSCRIPTION_MODERATOR, SUBSCRIPTION_OWNER] %}
                             <a class="w-100 btn btn-primary" href="/community/{{ community.link() }}/unsubscribe" rel="nofollow">{{ _('Leave') }}</a>
diff --git a/app/templates/post/add_reply.html b/app/templates/post/add_reply.html
index 386a27f0..719fbfad 100644
--- a/app/templates/post/add_reply.html
+++ b/app/templates/post/add_reply.html
@@ -50,9 +50,11 @@
                             <a class="w-100 btn btn-primary" href="/community/{{ post.community.link() }}/subscribe" rel="nofollow">{{ _('Join') }}</a>
                         {% endif %}
                     </div>
-                    <div class="col-6">
-                        <a class="w-100 btn btn-primary" href="/community/{{ post.community.link() }}/submit">{{ _('Create post') }}</a>
-                    </div>
+                    {% if not community.restricted_to_mods or (community.restricted_to_mods and current_user.is_authenticated and community_membership(current_user, community) in [SUBSCRIPTION_MODERATOR, SUBSCRIPTION_OWNER]) %}
+                        <div class="col-6">
+                            <a class="w-100 btn btn-primary" href="/community/{{ post.community.link() }}/submit">{{ _('Create post') }}</a>
+                        </div>
+                    {% endif %}
                 </div>
                 <!-- <form method="get">
                     <input type="search" name="search" class="form-control mt-2" placeholder="{{ _('Search this community') }}" />
diff --git a/app/templates/post/continue_discussion.html b/app/templates/post/continue_discussion.html
index 46f0c787..d00dca29 100644
--- a/app/templates/post/continue_discussion.html
+++ b/app/templates/post/continue_discussion.html
@@ -101,9 +101,11 @@
                             <a class="w-100 btn btn-primary" href="/community/{{ post.community.link() }}/subscribe" rel="nofollow">{{ _('Join') }}</a>
                         {% endif %}
                     </div>
-                    <div class="col-6">
-                        <a class="w-100 btn btn-primary" href="/community/{{ post.community.link() }}/submit">{{ _('Create post') }}</a>
-                    </div>
+                    {% if not community.restricted_to_mods or (community.restricted_to_mods and current_user.is_authenticated and community_membership(current_user, community) in [SUBSCRIPTION_MODERATOR, SUBSCRIPTION_OWNER]) %}
+                        <div class="col-6">
+                            <a class="w-100 btn btn-primary" href="/community/{{ post.community.link() }}/submit">{{ _('Create post') }}</a>
+                        </div>
+                    {% endif %}
                 </div>
                 <!-- <form method="get">
                     <input type="search" name="search" class="form-control mt-2" placeholder="{{ _('Search this community') }}" />
diff --git a/app/templates/post/post.html b/app/templates/post/post.html
index b47b130c..04006125 100644
--- a/app/templates/post/post.html
+++ b/app/templates/post/post.html
@@ -169,9 +169,11 @@
         <div class="card">
             <div class="card-body">
                 <div class="row">
-                    <div class="col-6">
-                        <a class="w-100 btn btn-primary" href="/community/{{ post.community.link() }}/submit">{{ _('Create post') }}</a>
-                    </div>
+                    {% if not community.restricted_to_mods or (community.restricted_to_mods and current_user.is_authenticated and community_membership(current_user, community) in [SUBSCRIPTION_MODERATOR, SUBSCRIPTION_OWNER]) %}
+                        <div class="col-6">
+                            <a class="w-100 btn btn-primary" href="/community/{{ post.community.link() }}/submit">{{ _('Create post') }}</a>
+                        </div>
+                    {% endif %}
                     <div class="col-6">
                         {% if current_user.is_authenticated and community_membership(current_user, post.community) >= SUBSCRIPTION_MEMBER %}
                             <a class="w-100 btn btn-primary" href="/community/{{ post.community.link() }}/unsubscribe" rel="nofollow">{{ _('Leave') }}</a>
diff --git a/app/templates/post/post_reply_edit.html b/app/templates/post/post_reply_edit.html
index 5c3c2339..e9955240 100644
--- a/app/templates/post/post_reply_edit.html
+++ b/app/templates/post/post_reply_edit.html
@@ -46,9 +46,11 @@
                             <a class="w-100 btn btn-primary" href="/community/{{ post.community.link() }}/subscribe" rel="nofollow">{{ _('Subscribe') }}</a>
                         {% endif %}
                     </div>
-                    <div class="col-6">
-                        <a class="w-100 btn btn-primary" href="/community/{{ post.community.link() }}/submit">{{ _('Create post') }}</a>
-                    </div>
+                    {% if not community.restricted_to_mods or (community.restricted_to_mods and current_user.is_authenticated and community_membership(current_user, community) in [SUBSCRIPTION_MODERATOR, SUBSCRIPTION_OWNER]) %}
+                        <div class="col-6">
+                            <a class="w-100 btn btn-primary" href="/community/{{ post.community.link() }}/submit">{{ _('Create post') }}</a>
+                        </div>
+                    {% endif %}
                 </div>
                 <!-- <form method="get">
                     <input type="search" name="search" class="form-control mt-2" placeholder="{{ _('Search this community') }}" />
diff --git a/app/templates/topic/topic_create_post.html b/app/templates/topic/topic_create_post.html
index d27db4b8..292762a9 100644
--- a/app/templates/topic/topic_create_post.html
+++ b/app/templates/topic/topic_create_post.html
@@ -13,10 +13,17 @@
                             <tbody>
                                 {% for community in communities %}
                                     {% if not community.user_is_banned(current_user) %}
-                                        <tr>
-                                            <th class="pl-2"><a class="choose_topic_for_post" data-id="{{ community.id }}" href="/community/{{ community.link() }}/submit" rel="nofollow" aria-label="{{ _('Post in %(name)s', name=community.display_name()) }}"><img src="{{ community.icon_image('tiny') }}" class="community_icon rounded-circle" loading="lazy" alt="" />
-                                            {{ community.display_name() }}</a></th>
-                                        </tr>
+                                        {% if not community.restricted_to_mods or (community.restricted_to_mods and community_membership(current_user, community) in [SUBSCRIPTION_MODERATOR, SUBSCRIPTION_OWNER]) %}
+                                            <tr>
+                                                <th class="pl-2"><a class="choose_topic_for_post" data-id="{{ community.id }}" href="/community/{{ community.link() }}/submit" rel="nofollow" aria-label="{{ _('Post in %(name)s', name=community.display_name()) }}"><img src="{{ community.icon_image('tiny') }}" class="community_icon rounded-circle" loading="lazy" alt="" />
+                                                {{ community.display_name() }}</a></th><th></th>
+                                            </tr>
+                                        {% else %}
+                                            <tr>
+                                                <th class="pl-2"><a class="choose_topic" data-id="{{ community.id }}" href="/c/{{ community.link() }}" rel="nofollow" aria-label="{{ _('View %(name)s', name=community.display_name()) }}"><img src="{{ community.icon_image('tiny') }}" class="community_icon rounded-circle" loading="lazy" alt="" />
+                                                {{ community.display_name() }}</a></th><th>(Posts are restricted to Mods)</th>
+                                            </tr>
+                                        {% endif %}
                                     {% endif %}
                                 {% endfor %}
                             </tbody>
diff --git a/app/topic/routes.py b/app/topic/routes.py
index 0751bcb4..53619025 100644
--- a/app/topic/routes.py
+++ b/app/topic/routes.py
@@ -9,7 +9,7 @@ from flask_babel import _
 from sqlalchemy import text, desc, or_
 
 from app.activitypub.signature import post_request
-from app.constants import SUBSCRIPTION_NONMEMBER, POST_TYPE_IMAGE, POST_TYPE_LINK
+from app.constants import SUBSCRIPTION_NONMEMBER, SUBSCRIPTION_OWNER, SUBSCRIPTION_MODERATOR, POST_TYPE_IMAGE, POST_TYPE_LINK
 from app.inoculation import inoculation
 from app.models import Topic, Community, Post, utcnow, CommunityMember, CommunityJoinRequest, User
 from app.topic import bp
@@ -117,6 +117,7 @@ def show_topic(topic_path):
                                show_post_community=True, moderating_communities=moderating_communities(current_user.get_id()),
                                joined_communities=joined_communities(current_user.get_id()),
                                inoculation=inoculation[randint(0, len(inoculation) - 1)],
+                               SUBSCRIPTION_OWNER=SUBSCRIPTION_OWNER, SUBSCRIPTION_MODERATOR=SUBSCRIPTION_MODERATOR,
                                POST_TYPE_LINK=POST_TYPE_LINK, POST_TYPE_IMAGE=POST_TYPE_IMAGE)
     else:
         abort(404)
@@ -200,8 +201,7 @@ def topic_create_post(topic_name):
         community = Community.query.get_or_404(int(request.form.get('community_id')))
         return redirect(url_for('community.join_then_add', actor=community.link()))
     return render_template('topic/topic_create_post.html', communities=communities, topic=topic,
-                           moderating_communities=moderating_communities(current_user.get_id()),
-                           joined_communities=joined_communities(current_user.get_id()))
+                           SUBSCRIPTION_OWNER=SUBSCRIPTION_OWNER, SUBSCRIPTION_MODERATOR=SUBSCRIPTION_MODERATOR)
 
 
 def topics_for_form():