From 31cbd0c264e69bb9b168b791a82525cb84ed2483 Mon Sep 17 00:00:00 2001
From: santoslgl01-web <santoslgl01-web@users.noreply.github.com>
Date: Sun, 26 Apr 2026 04:17:47 -0300
Subject: [PATCH] fix: hide bounty admin actions from unauthorized users

Resolves #238
---
 lib/algora_web/live/org/bounties_live.ex | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/lib/algora_web/live/org/bounties_live.ex b/lib/algora_web/live/org/bounties_live.ex
index 9dccffbd2..3b98c717a 100644
--- a/lib/algora_web/live/org/bounties_live.ex
+++ b/lib/algora_web/live/org/bounties_live.ex
@@ -220,7 +220,10 @@ defmodule AlgoraWeb.Org.BountiesLive do
                       <% end %>
                     </td>
                     <td class="[&:has([role=checkbox])]:pr-0 p-4 align-middle">
-                      <div class="flex items-center justify-end gap-2">
+                      <div
+                        :if={@current_user_role in [:admin, :mod]}
+                        class="flex items-center justify-end gap-2"
+                      >
                         <.button
                           phx-click="edit-bounty-amount"
                           phx-value-id={bounty.id}