Allow Moderators to edit charts

SpinShare · Oct 26, 2023 · 39c6bb7 · 39c6bb7
1 parent 81a9295
commit 39c6bb7
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 3 deletions.
diff --git a/src/Controller/SongController.php b/src/Controller/SongController.php
@@ -225,7 +225,12 @@ public function songUpdate(Request $request, int $songId)
         $em = $this->getDoctrine()->getManager();
         $data = [];
 
-        $song = $em->getRepository(Song::class)->findOneBy(array('id' => $songId, 'uploader' => $user->getId()));
+        $song = null;
+        if($user->hasRole('ROLE_ADMIN') || $user->hasRole('ROLE_MODERATOR')) {
+            $song = $em->getRepository(Song::class)->findOneBy(array('id' => $songId));
+        } else {
+            $song = $em->getRepository(Song::class)->findOneBy(array('id' => $songId, 'uploader' => $user->getId()));
+        }
 
         $dlcs = $em->getRepository(DLC::class)->findAll();
         $dlcOptions = [

diff --git a/templates/song/detail.html.twig b/templates/song/detail.html.twig
@@ -62,18 +62,21 @@
                 {% if is_granted('ROLE_USER') %}
                     </div>
                     <div class="action-row">
-                        {% if uploader.id == app.user.id %}
+                        {% if uploader.id == app.user.id or is_granted('ROLE_MODERATOR') %}
                             <a href="{{ path('song.update', {songId: song.id}) }}" class="action">
                                 <div class="icon">
                                     <i class="mdi mdi-pencil"></i>
                                 </div>
                             </a>
+                        {% endif %}
+                        {% if uploader.id == app.user.id %}
                             <a href="{{ path('song.delete', {songId: song.id}) }}" class="action">
                                 <div class="icon">
                                     <i class="mdi mdi-delete"></i>
                                 </div>
                             </a>
-                        {% elseif is_granted('ROLE_MODERATOR') %}
+                        {% endif %}
+                        {% if is_granted('ROLE_MODERATOR') %}
                             <a href="{{ path('moderation.song.remove', {songId: song.id}) }}" onclick="return confirm('Are you sure? This action cannot be undone!')" class="action">
                                 <div class="icon">
                                     <i class="mdi mdi-delete"></i>