# HG changeset patch
# User Christophe Lincoln <pankso@slitaz.org>
# Date 1486746720 -3600
# Node ID 5102774d2794ebdc9597519c30032307cb929f12
# Parent  6f798394f27e9ccaa94c5724cb55a3ece9a2df9b
Overall improvments

diff -r 6f798394f27e -r 5102774d2794 web/bugs.cgi
--- a/web/bugs.cgi	Fri Feb 10 17:19:52 2017 +0100
+++ b/web/bugs.cgi	Fri Feb 10 18:12:00 2017 +0100
@@ -308,8 +308,13 @@
 		if [ "$STATUS" == "OPEN" ]; then
 			cat << EOT
 <a href="?id=$id&amp;close">$(gettext "Close bug")</a>
+EOT
+		# Only original user and admin can edit a bug
+		if [ "$user" == "$CREATOR" ] || admin_user; then
+			cat << EOT
 <a href="?edit=$id">$(gettext "Edit bug")</a>
 EOT
+		fi
 		else
 			cat << EOT
 <a href="?id=$id&amp;open">$(gettext "Re open bug")</a>
@@ -448,10 +453,14 @@
 EOT
 }
 
-
 # Edit/Save a bug
 edit_bug() {
 	. $bugdir/$id/bug.conf
+	if admin_user || [ "$user" == "$CREATOR" ]; then
+		continue
+	else
+		gettext "You can't edit someone else bug!" && exit 0
+	fi
 	cat << EOT
 <h2>$(eval_gettext 'Edit Bug $bug')</h2>
 <div id="edit">
diff -r 6f798394f27e -r 5102774d2794 web/plugins/debug/debug.cgi
--- a/web/plugins/debug/debug.cgi	Fri Feb 10 17:19:52 2017 +0100
+++ b/web/plugins/debug/debug.cgi	Fri Feb 10 18:12:00 2017 +0100
@@ -8,8 +8,8 @@
 	header
 	html_header
 	user_box
-	if ! check_auth; then
-		gettext "You must be logged in to view the dashboard"
+	if check_auth && ! admin_user; then
+		gettext "You must be admin to debug"
 		exit 0
 	fi
 	cat << EOT
diff -r 6f798394f27e -r 5102774d2794 web/plugins/debug/debug.conf
--- a/web/plugins/debug/debug.conf	Fri Feb 10 17:19:52 2017 +0100
+++ b/web/plugins/debug/debug.conf	Fri Feb 10 18:12:00 2017 +0100
@@ -3,7 +3,12 @@
 PLUGIN="Debug Tazbug"
 SHORT_DESC="Debug and clean-up Tazbug database"
 MAINTAINER="devel@slitaz.org"
+
+# Authenticated users
 PLUGINS_TOOLS="${PLUGINS_TOOLS}"
-DASHBOARD_TOOLS="${DASHBOARD_TOOLS} <a href='?debug'>Debug</a>"
+DASHBOARD_TOOLS="${DASHBOARD_TOOLS}"
+
+# Admin only in Dashboard
+ADMIN_TOOLS="${ADMIN_TOOLS} <a href='?debug'>Debug</a>"
 
 # Configurable variables used in plugin.cgi
diff -r 6f798394f27e -r 5102774d2794 web/style.css
--- a/web/style.css	Fri Feb 10 17:19:52 2017 +0100
+++ b/web/style.css	Fri Feb 10 18:12:00 2017 +0100
@@ -116,9 +116,9 @@
 	max-width: 720px;
 }
 
-#newbug textarea { width: 480px; }
+#newbug textarea, #edit textarea { width: 490px; height: 180px; }
 
-#edit textarea { width: 100%; height: 240px; }
+/* #edit textarea { width: 100%; height: 240px; } */
 
 .box, pre, #login, #account-info {
 	background-color: #f8f8f8;