From adc2b71eb7638c9e73be947e72c4ff00d4e44ce6 Mon Sep 17 00:00:00 2001
From: patrickzerhusen <patrick.zerhusen@endex-geodaten.de>
Date: Sun, 19 Apr 2026 16:28:09 +0200
Subject: [PATCH] bugfix users can now only edit and delete own contributions

---
 public/js/app.js | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/public/js/app.js b/public/js/app.js
index b3df7f0..3f97e1a 100644
--- a/public/js/app.js
+++ b/public/js/app.js
@@ -401,10 +401,11 @@ function bindFeaturePopup(feature, layer) {
                     '<i class="fa-solid fa-thumbs-down"></i> <span id="dislikes-' + props.contribution_id + '">' + props.dislikes_count + '</span>' +
                 '</button>' +
             '</div>' +
-            '<div class="popup-detail-actions">' +
-                '<button class="btn btn-primary" onclick="editContribution(' + props.contribution_id + ')"><i class="fa-solid fa-pen"></i> Bearbeiten</button>' +
-                '<button class="btn btn-danger" onclick="deleteContribution(' + props.contribution_id + ')"><i class="fa-solid fa-trash"></i> Löschen</button>' +
-            '</div>' +
+            (currentUser === props.author_name ?
+                '<div class="popup-detail-actions">' +
+                    '<button class="btn btn-primary" onclick="editContribution(' + props.contribution_id + ')"><i class="fa-solid fa-pen"></i> Bearbeiten</button>' +
+                    '<button class="btn btn-danger" onclick="deleteContribution(' + props.contribution_id + ')"><i class="fa-solid fa-trash"></i> Löschen</button>' +
+                '</div>' : '') +
         '</div>';
 
     layer.bindPopup(html, { maxWidth: 320, minWidth: 240 });