Function pageReadOnly

internal/web/admin_items.go:45–55

pageReadOnly returns true when the authenticated user is a mod who lacks the write permission for the current admin page. Admins always have full access.

(r *http.Request)

// pageReadOnly returns true when the authenticated user is a mod who lacks the
// write permission for the current admin page. Admins always have full access.
func pageReadOnly(r *http.Request) bool {
	u := GetAuthedUser(r)
	if u == nil || u.Role == users.RoleAdmin {
		return false
	}
	writeKey, ok := pageWritePermissions[strings.TrimRight(r.URL.Path, "/")]
	if !ok {
		return false
	}
	return !u.HasPermission(writeKey)
}

// serveAdminTemplate is a helper that parses and executes a named admin HTML
// template, merging any extra data into the standard template data map.