From 0690e70ebe3487633e7c31be2933e9970131506d Mon Sep 17 00:00:00 2001
From: Brian McGonagill <bmcgonag@gmail.com>
Date: Thu, 25 Aug 2022 20:15:03 -0500
Subject: [PATCH] fixed an issue of filtering who can delete products, and
 added one set of permissions to view manage.

---
 client/AdminMgmt/ProductMgmt/prodMgmtTbl.html | 4 ++--
 client/General/headerBar.html                 | 8 ++++++--
 imports/api/products.js                       | 9 +--------
 3 files changed, 9 insertions(+), 12 deletions(-)

diff --git a/client/AdminMgmt/ProductMgmt/prodMgmtTbl.html b/client/AdminMgmt/ProductMgmt/prodMgmtTbl.html
index dc77774..6e53a87 100644
--- a/client/AdminMgmt/ProductMgmt/prodMgmtTbl.html
+++ b/client/AdminMgmt/ProductMgmt/prodMgmtTbl.html
@@ -27,8 +27,8 @@
                             <td>{{prodStore}}</td>
                             <td>{{prodLocation}}</td>
                             <td>
-                                <i class="material-icons clickable deleteProduct tooltipped" data-position="top" data-tooltip="Delete Product">delete</i>
-                                <i class="material-icons clickable editProduct tooltipped" data-position="top" data-tooltip="Edit Product">edit</i>
+                                <i class="material-icons clickable deleteProduct">delete</i>
+                                <i class="material-icons clickable editProduct">edit</i>
                             </td>
                         </tr>
                     {{/each}}
diff --git a/client/General/headerBar.html b/client/General/headerBar.html
index a014823..e15265e 100644
--- a/client/General/headerBar.html
+++ b/client/General/headerBar.html
@@ -9,7 +9,9 @@
           <ul class="right hide-on-med-and-down">
             {{#if currentUser}}
               <li><a href="#" id="mylists" class="navBtn">My Lists</a></li>
-              <li><a href="#" id="manage" class="navBtn">Manage</a></li>
+              {{#if isInRole 'systemadmin'}}
+                <li><a href="#" id="manage" class="navBtn">Manage</a></li>
+              {{/if}}
               <li class="signOut"><a href="#" class="signOut">Log Out</a></li>
             {{else}}
               <li><a href="#!" id="login" class="navBtn">Login</a></li>
@@ -20,7 +22,9 @@
       <ul class="sidenav" id="mobile-demo">
         {{#if currentUser}}
         <li><a href="#!" id="mylists" class="navBtn">My Lists</a></li>
-        <li><a href="#!" id="manage" class="navBtn">Manage</a></li>
+        {{#if isInRole 'systemadmin'}}
+          <li><a href="#!" id="manage" class="navBtn">Manage</a></li>
+        {{/if}}
         <li><a href="#!" class="signOut">Sign Out</a></li>
         {{else}}
           <li><a href="#!" id="login" class="navBtn">Login</a></li>
diff --git a/imports/api/products.js b/imports/api/products.js
index f6bf5ab..91775f9 100644
--- a/imports/api/products.js
+++ b/imports/api/products.js
@@ -57,13 +57,6 @@ Meteor.methods({
             throw new Meteor.Error('You are not allowed to delete products. Make sure you are logged in with valid user credentials.');
         }
 
-        let prodInfo = Products.findOne({ _id: prodId });
-        let myId = this.userId;
-        if (myId == prodInfo.prodOwner) {
-            return Products.remove({ _id: prodId });
-        } else {
-            console.log("User not allowed to delete this product. Not the owner!");
-            return("Not Allowed!");
-        }
+        return Products.remove({ _id: prodId });
     }
 });
\ No newline at end of file