From 47ae9d6ca6450d037b890f45496b1e2dddc92551 Mon Sep 17 00:00:00 2001
From: Ian Mitchell <ian.mitchel1@live.com>
Date: Mon, 21 Jul 2014 14:48:45 -0700
Subject: [PATCH] Hide Settings Sidebar Based on Role
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Implements #3294. Currently, we don’t have a permission system on the
client side, so this relies on a hardcoded “author” string.
---
 core/client/models/user.js         |  6 ++++++
 core/client/templates/settings.hbs | 18 +++++++++++++-----
 2 files changed, 19 insertions(+), 5 deletions(-)

diff --git a/core/client/models/user.js b/core/client/models/user.js
index 59f430b3e9..8e6e78459d 100644
--- a/core/client/models/user.js
+++ b/core/client/models/user.js
@@ -32,6 +32,12 @@ var User = DS.Model.extend(NProgressSaveMixin, ValidationEngine, {
         return this.get('roles').objectAt(0).get('name').toLowerCase() === 'author';
     }),
 
+    // TODO: Once client-side permissions are in place,
+    // remove the hard role check.
+    isEditor: Ember.computed('roles', function () {
+        return this.get('roles').objectAt(0).get('name').toLowerCase() === 'editor';
+    }),
+
     saveNewPassword: function () {
         var url = this.get('ghostPaths.url').api('users', 'password');
         return ic.ajax.request(url, {
diff --git a/core/client/templates/settings.hbs b/core/client/templates/settings.hbs
index 3c2ec2a5b4..84eb0c3082 100644
--- a/core/client/templates/settings.hbs
+++ b/core/client/templates/settings.hbs
@@ -4,11 +4,19 @@
     </header>
     <nav class="settings-menu">
         <ul>
-	    {{gh-activating-list-item route="settings.general" title="General" classNames="general"}}
-	    {{gh-activating-list-item route="settings.users" title="Users" classNames="users"}}
-            {{#if showApps}}
-	    {{gh-activating-list-item route="settings.apps" title="Apps" classNames="apps"}}
-            {{/if}}
+            {{#unless session.user.isAuthor}}
+                {{#unless session.user.isEditor}}
+                    {{gh-activating-list-item route="settings.general" title="General" classNames="general"}}
+                {{/unless}}
+
+                {{gh-activating-list-item route="settings.users" title="Users" classNames="users"}}
+
+                {{#if showApps}}
+                    {{#unless session.user.isEditor}}
+                        {{gh-activating-list-item route="settings.apps" title="Apps" classNames="apps"}}
+                    {{/unless}}
+                {{/if}}
+            {{/unless}}
         </ul>
     </nav>
 </aside>