fix: Danger zone is displayed to USER RO

This closes gravitee-io/issues#1666
gravitee-io · Nov 20, 2018 · a9937ac · a9937ac
1 parent 6f892de
commit a9937ac
Showing 1 changed file with 9 additions and 14 deletions.
diff --git a/src/management/api/portal/general/apiPortal.html b/src/management/api/portal/general/apiPortal.html
@@ -141,51 +141,46 @@ <h2>Quality</h2>
     </div>
 
 
-      <div class="gv-form gv-form-danger">
+      <div class="gv-form gv-form-danger" permission permission-only="['api-definition-u', 'api-definition-d']">
         <h2>Danger Zone</h2>
         <div class="gv-form-content" layout="column">
-          <div layout="row" layout-align="space-between center">
+          <div layout="row" layout-align="space-between center" permission permission-only="'api-definition-u'">
             <div class="gv-form-danger-text" ng-if="portalCtrl.api.state==='started'">
               Stop the API. It will no longer be available on all gateways.
             </div>
             <div class="gv-form-danger-text" ng-if="portalCtrl.api.state==='stopped'">
               Start the API. It will be available on all gateways (depending on sharding tags).
             </div>
             <div>
-              <md-button permission permission-only="'api-definition-u'"
-                         class="md-flat md-warn" type="button" ng-click="portalCtrl.changeLifecycle()"
+              <md-button class="md-flat md-warn" type="button" ng-click="portalCtrl.changeLifecycle()"
                          ng-if="portalCtrl.api.state==='started'">Stop the API</md-button>
-              <md-button permission permission-only="'api-definition-u'"
-                         class="md-flat md-warn" type="button" ng-click="portalCtrl.changeLifecycle()"
+              <md-button class="md-flat md-warn" type="button" ng-click="portalCtrl.changeLifecycle()"
                          ng-if="portalCtrl.api.state==='stopped'">Start the API</md-button>
             </div>
           </div>
 
-          <div layout="row" layout-align="space-between center">
+          <div layout="row" layout-align="space-between center" permission permission-only="'api-definition-u'">
             <div class="gv-form-danger-text" ng-if="portalCtrl.api.visibility==='public'">
               Make this API private. Only members will see it.
             </div>
             <div class="gv-form-danger-text" ng-if="portalCtrl.api.visibility==='private'">
               Make this API public. Everyone can see it.
             </div>
             <div>
-              <md-button permission permission-only="'api-definition-u'"
-                         class="md-flat md-warn" type="button" ng-click="portalCtrl.toggleVisibility(); portalCtrl.update(portalCtrl.api);"
+              <md-button class="md-flat md-warn" type="button" ng-click="portalCtrl.toggleVisibility(); portalCtrl.update(portalCtrl.api);"
                          ng-if="portalCtrl.api.visibility==='public'">Make Private</md-button>
-              <md-button permission permission-only="'api-definition-u'"
-                         class="md-flat md-warn" type="button" ng-click="portalCtrl.toggleVisibility(); portalCtrl.update(portalCtrl.api);"
+              <md-button class="md-flat md-warn" type="button" ng-click="portalCtrl.toggleVisibility(); portalCtrl.update(portalCtrl.api);"
                          ng-if="portalCtrl.api.visibility==='private'">Make Public</md-button>
             </div>
           </div>
 
-          <div layout="row" layout-align="space-between center">
+          <div layout="row" layout-align="space-between center" permission permission-only="'api-definition-d'">
             <div class="gv-form-danger-text">
               Delete this API.
               <span ng-if="portalCtrl.api.state === 'started'">A running API cannot be deleted</span>
             </div>
             <div>
-              <md-button permission permission-only="'api-definition-d'"
-                         class="md-flat md-warn" type="button" ng-click="portalCtrl.delete(portalCtrl.api.id)"
+              <md-button class="md-flat md-warn" type="button" ng-click="portalCtrl.delete(portalCtrl.api.id)"
                          ng-disabled="portalCtrl.api.state === 'started'">Delete</md-button>
             </div>
           </div>