From 8c4a53bc170187c14bea61fe818b1cf7e8e7b5fa Mon Sep 17 00:00:00 2001
From: Julian Krauser <jkrauser209@gmail.com>
Date: Wed, 23 Jul 2025 10:28:37 +0200
Subject: [PATCH] update permissions

---
 .../TypeInspectionPlanListItem.vue            |  6 ++++
 src/main.css                                  |  9 +++++-
 src/router/index.ts                           |  6 ++--
 .../admin/unit/damageReport/Overview.vue      |  1 +
 .../admin/unit/equipment/DamageReport.vue     |  1 +
 src/views/admin/unit/equipment/Inspection.vue |  3 +-
 src/views/admin/unit/equipment/Repair.vue     |  2 ++
 .../unit/equipmentType/InspectionPlans.vue    |  2 +-
 .../unit/inspection/InspectionExecute.vue     | 15 +++++----
 .../unit/inspectionPlan/InspectionPlan.vue    |  2 +-
 src/views/admin/unit/repair/DamageReports.vue |  9 ++++--
 src/views/admin/unit/repair/Overview.vue      | 31 ++++++++++++++++---
 .../admin/unit/repair/RepairStatusRouting.vue |  8 ++++-
 src/views/admin/unit/vehicle/DamageReport.vue |  1 +
 src/views/admin/unit/vehicle/Inspection.vue   |  3 +-
 src/views/admin/unit/vehicle/Repair.vue       |  2 ++
 src/views/admin/unit/vehicle/Vehicle.vue      |  2 +-
 .../unit/vehicleType/InspectionPlans.vue      |  2 +-
 .../admin/unit/wearable/DamageReport.vue      |  1 +
 src/views/admin/unit/wearable/Inspection.vue  |  3 +-
 src/views/admin/unit/wearable/Repair.vue      |  2 ++
 .../unit/wearableType/InspectionPlans.vue     |  2 +-
 22 files changed, 89 insertions(+), 24 deletions(-)

diff --git a/src/components/admin/unit/inspectionPlan/TypeInspectionPlanListItem.vue b/src/components/admin/unit/inspectionPlan/TypeInspectionPlanListItem.vue
index 7f677bd..73394c8 100644
--- a/src/components/admin/unit/inspectionPlan/TypeInspectionPlanListItem.vue
+++ b/src/components/admin/unit/inspectionPlan/TypeInspectionPlanListItem.vue
@@ -1,6 +1,7 @@
 <template>
   <RouterLink
     :to="{ name: 'admin-unit-inspection_plan-overview', params: { inspectionPlanId: inspectionPlan.id } }"
+    :disabled="!can('create', 'unit', 'inspection_plan')"
     class="flex flex-col h-fit w-full border border-primary rounded-md"
   >
     <div class="bg-primary p-2 text-white flex flex-row justify-between items-center">
@@ -15,6 +16,8 @@
 <script setup lang="ts">
 import { defineComponent, type PropType } from "vue";
 import type { InspectionPlanViewModel } from "@/viewmodels/admin/unit/inspection/inspectionPlan.models";
+import { mapState } from "pinia";
+import { useAbilityStore } from "@/stores/ability";
 </script>
 
 <script lang="ts">
@@ -25,5 +28,8 @@ export default defineComponent({
       default: {},
     },
   },
+  computed: {
+    ...mapState(useAbilityStore, ["can"]),
+  },
 });
 </script>
diff --git a/src/main.css b/src/main.css
index 244a55f..9c0b7b3 100644
--- a/src/main.css
+++ b/src/main.css
@@ -84,10 +84,17 @@ button[primary-outline]:not([primary-outline="false"]),
 
 button:disabled,
 [button]:disabled,
-[button].disabled {
+[button].disabled,
+[button][disabled="true"] {
   @apply opacity-75 pointer-events-none;
 }
 
+a:disabled,
+a.disabled,
+a[disabled="true"] {
+  @apply cursor-default pointer-events-none;
+}
+
 input:not([type="checkbox"]),
 textarea,
 select {
diff --git a/src/router/index.ts b/src/router/index.ts
index b5cc468..207acd2 100644
--- a/src/router/index.ts
+++ b/src/router/index.ts
@@ -805,7 +805,8 @@ const router = createRouter({
                   path: "create/:type?/:relatedId?",
                   name: "admin-unit-repair-create",
                   component: () => import("@/views/admin/unit/repair/RepairCreate.vue"),
-                  beforeEnter: [],
+                  meta: { type: "create", section: "unit", module: "repair" },
+                  beforeEnter: [abilityAndNavUpdate],
                   props: true,
                 },
                 {
@@ -1061,7 +1062,8 @@ const router = createRouter({
                   path: "start/:type?/:relatedId?/:inspectionPlanId?",
                   name: "admin-unit-inspection-start",
                   component: () => import("@/views/admin/unit/inspection/InspectionStart.vue"),
-                  beforeEnter: [],
+                  meta: { type: "create", section: "unit", module: "inspection_plan" },
+                  beforeEnter: [abilityAndNavUpdate],
                   props: true,
                 },
                 {
diff --git a/src/views/admin/unit/damageReport/Overview.vue b/src/views/admin/unit/damageReport/Overview.vue
index d72c452..110e03f 100644
--- a/src/views/admin/unit/damageReport/Overview.vue
+++ b/src/views/admin/unit/damageReport/Overview.vue
@@ -19,6 +19,7 @@
         v-if="!editStatus && !activeDamageReportObj.done"
         primary
         class="w-fit! self-end"
+        :disabled="!can('update', 'unit', 'damage_report')"
         @click="editStatus = true"
       >
         Status ändern
diff --git a/src/views/admin/unit/equipment/DamageReport.vue b/src/views/admin/unit/equipment/DamageReport.vue
index 1f04e66..a816da1 100644
--- a/src/views/admin/unit/equipment/DamageReport.vue
+++ b/src/views/admin/unit/equipment/DamageReport.vue
@@ -10,6 +10,7 @@
       <template #pageRow="{ row }: { row: DamageReportViewModel }">
         <RouterLink
           :to="{ name: 'admin-unit-damage_report-overview', params: { damageReportId: row.id } }"
+          :disabled="!can('create', 'unit', 'damage_report')"
           class="flex flex-col h-fit w-full border border-primary rounded-md"
         >
           <div class="bg-primary p-2 text-white flex flex-row gap-2 items-center">
diff --git a/src/views/admin/unit/equipment/Inspection.vue b/src/views/admin/unit/equipment/Inspection.vue
index a193ef8..5d2444f 100644
--- a/src/views/admin/unit/equipment/Inspection.vue
+++ b/src/views/admin/unit/equipment/Inspection.vue
@@ -9,6 +9,7 @@
       <template #pageRow="{ row }: { row: InspectionViewModel }">
         <RouterLink
           :to="{ name: 'admin-unit-inspection-execute', params: { inspectionId: row.id } }"
+          :disabled="!can('create', 'unit', 'inspection')"
           class="flex flex-col h-fit w-full border border-primary rounded-md"
         >
           <div class="bg-primary p-2 text-white flex flex-row gap-2 items-center">
@@ -24,8 +25,8 @@
     </Pagination>
     <div class="flex flex-row gap-4">
       <RouterLink
-        v-if="can('create', 'unit', 'equipment')"
         :to="{ name: 'admin-unit-inspection-start', params: { type: 'equipment', relatedId: equipmentId } }"
+        :disable="!can('create', 'unit', 'inspection')"
         button
         primary
         class="w-fit!"
diff --git a/src/views/admin/unit/equipment/Repair.vue b/src/views/admin/unit/equipment/Repair.vue
index 603db4e..1985b45 100644
--- a/src/views/admin/unit/equipment/Repair.vue
+++ b/src/views/admin/unit/equipment/Repair.vue
@@ -10,6 +10,7 @@
       <template #pageRow="{ row }: { row: RepairViewModel }">
         <RouterLink
           :to="{ name: 'admin-unit-repair-overview', params: { repairId: row.id } }"
+          :disabled="!can('create', 'unit', 'repair')"
           class="flex flex-col h-fit w-full border border-primary rounded-md"
         >
           <div class="bg-primary p-2 text-white flex flex-row gap-2 items-center">
@@ -24,6 +25,7 @@
     </Pagination>
     <RouterLink
       :to="{ name: 'admin-unit-repair-create', params: { type: 'equipment', relatedId: equipmentId } }"
+      :disabled="!can('create', 'unit', 'repair')"
       button
       primary
       class="w-fit!"
diff --git a/src/views/admin/unit/equipmentType/InspectionPlans.vue b/src/views/admin/unit/equipmentType/InspectionPlans.vue
index 924055a..5acfba9 100644
--- a/src/views/admin/unit/equipmentType/InspectionPlans.vue
+++ b/src/views/admin/unit/equipmentType/InspectionPlans.vue
@@ -8,8 +8,8 @@
   </div>
   <div class="flex flex-row gap-4">
     <RouterLink
-      v-if="can('create', 'unit', 'equipment_type')"
       :to="{ name: 'admin-unit-inspection_plan-create', query: { type: 'equipment', id: equipmentTypeId } }"
+      :disabled="!can('create', 'unit', 'inspection_plan')"
       button
       primary
       class="w-fit!"
diff --git a/src/views/admin/unit/inspection/InspectionExecute.vue b/src/views/admin/unit/inspection/InspectionExecute.vue
index 4a75e2a..0a1e886 100644
--- a/src/views/admin/unit/inspection/InspectionExecute.vue
+++ b/src/views/admin/unit/inspection/InspectionExecute.vue
@@ -31,35 +31,38 @@
             <OkNotOk
               v-if="point.type == InspectionPointEnum.oknok"
               :inspectionPoint="point"
-              :editable="activeInspectionObj.isOpen"
+              :editable="activeInspectionObj.isOpen && can('update', 'unit', 'inspection')"
               :modelValue="boolPointResult(point.id)"
               @update:model-value="(val) => updateCheckResult(point.id, val)"
             />
             <NumberInput
               v-else-if="point.type == InspectionPointEnum.number"
               :inspectionPoint="point"
-              :editable="activeInspectionObj.isOpen"
+              :editable="activeInspectionObj.isOpen && can('update', 'unit', 'inspection')"
               :modelValue="pointResult(point.id)"
               @update:model-value="(val) => updateCheckResult(point.id, val)"
             />
             <TextInput
               v-else-if="point.type == InspectionPointEnum.text"
               :inspectionPoint="point"
-              :editable="activeInspectionObj.isOpen"
+              :editable="activeInspectionObj.isOpen && can('update', 'unit', 'inspection')"
               :modelValue="pointResult(point.id)"
               @update:model-value="(val) => updateCheckResult(point.id, val)"
             />
             <FileInput
               v-else-if="point.type == InspectionPointEnum.file"
               :inspectionPoint="point"
-              :editable="activeInspectionObj.isOpen"
+              :editable="activeInspectionObj.isOpen && can('update', 'unit', 'inspection')"
               :modelValue="pointResult(point.id)"
               @update:model-value="(val) => updateCheckResult(point.id, val)"
               @update:upload="(val) => (fileStore[point.id] = val)"
             />
           </div>
         </div>
-        <div v-if="activeInspectionObj.isOpen" class="flex flex-row justify-end flex-wrap min-h-fit gap-2">
+        <div
+          v-if="activeInspectionObj.isOpen && can('update', 'unit', 'inspection')"
+          class="flex flex-row justify-end flex-wrap min-h-fit gap-2"
+        >
           <button primary-outline type="reset" class="w-fit!" :disabled="canSaveOrReset" @click="resetForm">
             verwerfen
           </button>
@@ -85,7 +88,7 @@
           <SuccessCheckmark v-else-if="status?.status == 'success'" />
           <FailureXMark v-else-if="status?.status == 'failed'" />
         </div>
-        <div v-else>
+        <div v-else-if="!activeInspectionObj.isOpen">
           <button primary type="button" @click="openPrintModal">Bericht anzeigen</button>
         </div>
       </div>
diff --git a/src/views/admin/unit/inspectionPlan/InspectionPlan.vue b/src/views/admin/unit/inspectionPlan/InspectionPlan.vue
index 07ba271..fe91823 100644
--- a/src/views/admin/unit/inspectionPlan/InspectionPlan.vue
+++ b/src/views/admin/unit/inspectionPlan/InspectionPlan.vue
@@ -18,8 +18,8 @@
 
         <div class="flex flex-row gap-4">
           <RouterLink
-            v-if="can('create', 'unit', 'inspection_plan')"
             :to="{ name: 'admin-unit-inspection_plan-create' }"
+            :disabled="!can('create', 'unit', 'inspection_plan')"
             primary
             button
             class="w-fit!"
diff --git a/src/views/admin/unit/repair/DamageReports.vue b/src/views/admin/unit/repair/DamageReports.vue
index a90ecb4..84cdeba 100644
--- a/src/views/admin/unit/repair/DamageReports.vue
+++ b/src/views/admin/unit/repair/DamageReports.vue
@@ -5,7 +5,7 @@
       :related="activeRepairObj.assigned"
       :relatedId="activeRepairObj.relatedId"
       :model-value="activeRepairObj.reports.map((r) => r.id)"
-      :disabled="!!activeRepairObj.finishedAt"
+      :disabled="!!activeRepairObj.finishedAt || !can('update', 'unit', 'repair')"
       @add:damage-report="handleReportAdd"
       @remove:difference="handleReportRemove"
     />
@@ -28,7 +28,12 @@
         </div>
       </div>
     </div>
-    <button primary class="w-fit! self-end" :disabled="!!activeRepairObj.finishedAt" @click="saveReports">
+    <button
+      primary
+      class="w-fit! self-end"
+      :disabled="!!activeRepairObj.finishedAt || !can('update', 'unit', 'repair')"
+      @click="saveReports"
+    >
       Änderungen speichern
     </button>
   </div>
diff --git a/src/views/admin/unit/repair/Overview.vue b/src/views/admin/unit/repair/Overview.vue
index 4c32fca..ba1f362 100644
--- a/src/views/admin/unit/repair/Overview.vue
+++ b/src/views/admin/unit/repair/Overview.vue
@@ -6,6 +6,7 @@
     </div>
     <button
       v-if="!editStatus && !activeRepairObj.finishedAt"
+      :disabled="!can('update', 'unit', 'repair')"
       primary
       class="w-fit! self-end"
       @click="editStatus = true"
@@ -20,17 +21,39 @@
     <form class="flex flex-col gap-2" @submit.prevent="saveData">
       <div>
         <label for="title">Kurzbeschreibung</label>
-        <input id="title" type="text" placeholder="---" :value="activeRepairObj.title" />
+        <input
+          id="title"
+          type="text"
+          placeholder="---"
+          :value="activeRepairObj.title"
+          :disabled="!!activeRepairObj.finishedAt || !can('update', 'unit', 'repair')"
+        />
       </div>
       <div>
         <label for="description">Beschreibung der Reparatur</label>
-        <textarea id="description" placeholder="---" :value="activeRepairObj.description"></textarea>
+        <textarea
+          id="description"
+          placeholder="---"
+          :value="activeRepairObj.description"
+          :disabled="!!activeRepairObj.finishedAt || !can('update', 'unit', 'repair')"
+        ></textarea>
       </div>
       <div>
         <label for="responsible">Verantwortlich</label>
-        <input id="responsible" type="text" placeholder="---" :value="activeRepairObj.responsible" />
+        <input
+          id="responsible"
+          type="text"
+          placeholder="---"
+          :value="activeRepairObj.responsible"
+          :disabled="!!activeRepairObj.finishedAt || !can('update', 'unit', 'repair')"
+        />
       </div>
-      <button primary type="submit" class="w-fit! self-end" :disabled="!!activeRepairObj.finishedAt">
+      <button
+        primary
+        type="submit"
+        class="w-fit! self-end"
+        :disabled="!!activeRepairObj.finishedAt || !can('update', 'unit', 'repair')"
+      >
         Änderungen speichern
       </button>
     </form>
diff --git a/src/views/admin/unit/repair/RepairStatusRouting.vue b/src/views/admin/unit/repair/RepairStatusRouting.vue
index ad0de6b..9c9deed 100644
--- a/src/views/admin/unit/repair/RepairStatusRouting.vue
+++ b/src/views/admin/unit/repair/RepairStatusRouting.vue
@@ -21,7 +21,13 @@
           </RouterLink>
         </div>
         <RouterView />
-        <RouterLink :to="{ name: 'admin-unit-repair-create' }" button primary class="w-fit!">
+        <RouterLink
+          :to="{ name: 'admin-unit-repair-create' }"
+          button
+          primary
+          class="w-fit!"
+          :disabled="!can('create', 'unit', 'repair')"
+        >
           Reparatur erstellen
         </RouterLink>
       </div>
diff --git a/src/views/admin/unit/vehicle/DamageReport.vue b/src/views/admin/unit/vehicle/DamageReport.vue
index 69f41de..c11ddce 100644
--- a/src/views/admin/unit/vehicle/DamageReport.vue
+++ b/src/views/admin/unit/vehicle/DamageReport.vue
@@ -10,6 +10,7 @@
       <template #pageRow="{ row }: { row: DamageReportViewModel }">
         <RouterLink
           :to="{ name: 'admin-unit-damage_report-overview', params: { damageReportId: row.id } }"
+          :disabled="!can('read', 'unit', 'damage_report')"
           class="flex flex-col h-fit w-full border border-primary rounded-md"
         >
           <div class="bg-primary p-2 text-white flex flex-row gap-2 items-center">
diff --git a/src/views/admin/unit/vehicle/Inspection.vue b/src/views/admin/unit/vehicle/Inspection.vue
index 193c62e..d98ad86 100644
--- a/src/views/admin/unit/vehicle/Inspection.vue
+++ b/src/views/admin/unit/vehicle/Inspection.vue
@@ -10,6 +10,7 @@
       <template #pageRow="{ row }: { row: InspectionViewModel }">
         <RouterLink
           :to="{ name: 'admin-unit-inspection-execute', params: { inspectionId: row.id } }"
+          :disabled="!can('read', 'unit', 'inspection')"
           class="flex flex-col h-fit w-full border border-primary rounded-md"
         >
           <div class="bg-primary p-2 text-white flex flex-row gap-2 items-center">
@@ -25,8 +26,8 @@
     </Pagination>
     <div class="flex flex-row gap-4">
       <RouterLink
-        v-if="can('create', 'unit', 'vehicle')"
         :to="{ name: 'admin-unit-inspection-start', params: { type: 'vehicle', relatedId: vehicleId } }"
+        :disabled="!can('read', 'unit', 'damage_report')"
         button
         primary
         class="w-fit!"
diff --git a/src/views/admin/unit/vehicle/Repair.vue b/src/views/admin/unit/vehicle/Repair.vue
index b4a74fc..65bd637 100644
--- a/src/views/admin/unit/vehicle/Repair.vue
+++ b/src/views/admin/unit/vehicle/Repair.vue
@@ -10,6 +10,7 @@
       <template #pageRow="{ row }: { row: RepairViewModel }">
         <RouterLink
           :to="{ name: 'admin-unit-repair-overview', params: { repairId: row.id } }"
+          :disabled="!can('read', 'unit', 'repair')"
           class="flex flex-col h-fit w-full border border-primary rounded-md"
         >
           <div class="bg-primary p-2 text-white flex flex-row gap-2 items-center">
@@ -24,6 +25,7 @@
     </Pagination>
     <RouterLink
       :to="{ name: 'admin-unit-repair-create', params: { type: 'vehicle', relatedId: vehicleId } }"
+      :disabled="!can('read', 'unit', 'repair')"
       button
       primary
       class="w-fit!"
diff --git a/src/views/admin/unit/vehicle/Vehicle.vue b/src/views/admin/unit/vehicle/Vehicle.vue
index 7651b10..4861759 100644
--- a/src/views/admin/unit/vehicle/Vehicle.vue
+++ b/src/views/admin/unit/vehicle/Vehicle.vue
@@ -18,7 +18,7 @@
 
         <div class="flex flex-row gap-4">
           <RouterLink
-            v-if="can('create', 'unit', 'equipment')"
+            v-if="can('create', 'unit', 'vehicle')"
             :to="{ name: 'admin-unit-vehicle-create' }"
             primary
             button
diff --git a/src/views/admin/unit/vehicleType/InspectionPlans.vue b/src/views/admin/unit/vehicleType/InspectionPlans.vue
index 5cc5c46..c0e3de1 100644
--- a/src/views/admin/unit/vehicleType/InspectionPlans.vue
+++ b/src/views/admin/unit/vehicleType/InspectionPlans.vue
@@ -9,8 +9,8 @@
 
   <div class="flex flex-row gap-4">
     <RouterLink
-      v-if="can('create', 'unit', 'vehicle_type')"
       :to="{ name: 'admin-unit-inspection_plan-create', query: { type: 'vehicle', id: vehicleTypeId } }"
+      :disabled="!can('read', 'unit', 'inspection_plan')"
       button
       primary
       class="w-fit!"
diff --git a/src/views/admin/unit/wearable/DamageReport.vue b/src/views/admin/unit/wearable/DamageReport.vue
index 59379ab..d8d836f 100644
--- a/src/views/admin/unit/wearable/DamageReport.vue
+++ b/src/views/admin/unit/wearable/DamageReport.vue
@@ -10,6 +10,7 @@
       <template #pageRow="{ row }: { row: DamageReportViewModel }">
         <RouterLink
           :to="{ name: 'admin-unit-damage_report-overview', params: { damageReportId: row.id } }"
+          :disabled="!can('read', 'unit', 'damage_report')"
           class="flex flex-col h-fit w-full border border-primary rounded-md"
         >
           <div class="bg-primary p-2 text-white flex flex-row gap-2 items-center">
diff --git a/src/views/admin/unit/wearable/Inspection.vue b/src/views/admin/unit/wearable/Inspection.vue
index d5e54be..83487d1 100644
--- a/src/views/admin/unit/wearable/Inspection.vue
+++ b/src/views/admin/unit/wearable/Inspection.vue
@@ -10,6 +10,7 @@
       <template #pageRow="{ row }: { row: InspectionViewModel }">
         <RouterLink
           :to="{ name: 'admin-unit-inspection-execute', params: { inspectionId: row.id } }"
+          :disabled="!can('read', 'unit', 'inspection')"
           class="flex flex-col h-fit w-full border border-primary rounded-md"
         >
           <div class="bg-primary p-2 text-white flex flex-row gap-2 items-center">
@@ -25,8 +26,8 @@
     </Pagination>
     <div class="flex flex-row gap-4">
       <RouterLink
-        v-if="can('create', 'unit', 'wearable')"
         :to="{ name: 'admin-unit-inspection-start', params: { type: 'wearable', relatedId: wearableId } }"
+        :disabled="!can('create', 'unit', 'inspection')"
         button
         primary
         class="w-fit!"
diff --git a/src/views/admin/unit/wearable/Repair.vue b/src/views/admin/unit/wearable/Repair.vue
index a3c0e26..6d20cf6 100644
--- a/src/views/admin/unit/wearable/Repair.vue
+++ b/src/views/admin/unit/wearable/Repair.vue
@@ -10,6 +10,7 @@
       <template #pageRow="{ row }: { row: RepairViewModel }">
         <RouterLink
           :to="{ name: 'admin-unit-repair-overview', params: { repairId: row.id } }"
+          :disabled="!can('read', 'unit', 'repair')"
           class="flex flex-col h-fit w-full border border-primary rounded-md"
         >
           <div class="bg-primary p-2 text-white flex flex-row gap-2 items-center">
@@ -24,6 +25,7 @@
     </Pagination>
     <RouterLink
       :to="{ name: 'admin-unit-repair-create', params: { type: 'wearable', relatedId: wearableId } }"
+      :disabled="!can('read', 'unit', 'repair')"
       button
       primary
       class="w-fit!"
diff --git a/src/views/admin/unit/wearableType/InspectionPlans.vue b/src/views/admin/unit/wearableType/InspectionPlans.vue
index 5cc5c46..c0e3de1 100644
--- a/src/views/admin/unit/wearableType/InspectionPlans.vue
+++ b/src/views/admin/unit/wearableType/InspectionPlans.vue
@@ -9,8 +9,8 @@
 
   <div class="flex flex-row gap-4">
     <RouterLink
-      v-if="can('create', 'unit', 'vehicle_type')"
       :to="{ name: 'admin-unit-inspection_plan-create', query: { type: 'vehicle', id: vehicleTypeId } }"
+      :disabled="!can('read', 'unit', 'inspection_plan')"
       button
       primary
       class="w-fit!"