Merge remote-tracking branch 'origin/master'

ui/src/pages/UserDetail.vue

@@ -1,5 +1,5 @@
 <template>
-  <q-page class="user-detail-page">
+  <q-page v-if="canAccessPage" class="user-detail-page">
 
     <!-- LOADING -->
     <q-inner-loading :showing="loading">
@@ -39,6 +39,7 @@
 
         <div>
           <q-btn
+            v-if="canSaveUser"
             :label="saveLabel"
             color="primary"
             icon="save"
@@ -46,6 +47,7 @@
             @click="onSave"
           />
           <q-btn
+            v-if="canReadUser"
             label="LİSTEYE DÖN"
             flat
             icon="arrow_back"
@@ -80,6 +82,7 @@
 
           <div class="row items-center">
             <q-btn
+              v-if="canUpdateUser"
               label="PAROLA MAİLİ GÖNDER"
               color="primary"
               icon="mail"
@@ -240,6 +243,12 @@
     </div>
 
   </q-page>
+
+  <q-page v-else class="q-pa-md flex flex-center">
+    <div class="text-negative text-subtitle1">
+      Bu module erisim yetkiniz yok.
+    </div>
+  </q-page>
 </template>
 
 <script setup>
@@ -251,10 +260,9 @@ import { useUserDetailStore } from 'src/stores/UserDetailStore'
 import { usePermission } from 'src/composables/usePermission'
 
 const { canRead, canWrite, canUpdate } = usePermission()
-
-const canReadOrder   = canRead('order')
-const canWriteOrder  = canWrite('order')
-const canUpdateOrder = canUpdate('order')
+const canReadUser = canRead('user')
+const canWriteUser = canWrite('user')
+const canUpdateUser = canUpdate('user')
 
 const $q = useQuasar()
 const route = useRoute()
@@ -280,6 +288,12 @@ const mode = computed(() => route.meta.mode || 'edit')
 const isNew = computed(() => mode.value === 'new')
 const isEdit = computed(() => mode.value === 'edit')
 const isView = computed(() => mode.value === 'view')
+const canAccessPage = computed(() => {
+  if (isNew.value) return canWriteUser.value
+  if (isEdit.value) return canUpdateUser.value
+  return canReadUser.value
+})
+const canSaveUser = computed(() => isNew.value ? canWriteUser.value : canUpdateUser.value)
 
 const userId = computed(() => (isEdit.value || isView.value) ? Number(route.params.id) : null)
 
@@ -306,6 +320,8 @@ const canSendPasswordMail = computed(() => {
 watch(
   () => userId.value,
   async (id) => {
+    if (!canAccessPage.value) return
+
     await store.fetchLookups()
 
     if (!id) {
@@ -320,6 +336,11 @@ watch(
 
 /* ================= ACTIONS ================= */
 async function onSave () {
+  if (!canSaveUser.value) {
+    $q.notify({ type: 'negative', message: 'Kaydetme yetkiniz yok' })
+    return
+  }
+
   try {
     console.log('🟢 onSave() START', { mode: mode.value })