From c495dce27dcc4ca0d79a481834b7a0f4da3d0baf Mon Sep 17 00:00:00 2001
From: "D. Berge" <dberge@aaltronav.eu>
Date: Sun, 1 May 2022 21:20:52 +0200
Subject: [PATCH] Don't show event history widget for guests.

NOTE: guests still do have access to the relevant API endpoint.
In theory, a persistent and computer literate guest user could
visit the API endpoint directly and retrieve the edit history.
As the edit history may need to be given to users who otherwise
do not have write access, it is considered quite acceptable to
allow guest users to access the endpoint.

Closes #194.
---
 lib/www/client/source/src/views/Log.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/www/client/source/src/views/Log.vue b/lib/www/client/source/src/views/Log.vue
index 815acb5..7ff41da 100644
--- a/lib/www/client/source/src/views/Log.vue
+++ b/lib/www/client/source/src/views/Log.vue
@@ -340,7 +340,7 @@
                   :href="$route.path+'?label='+encodeURIComponent(label)"
                 >{{label}}</v-chip>
               </span>
-              <dougal-event-edit-history v-if="entry.has_edits"
+              <dougal-event-edit-history v-if="entry.has_edits && writeaccess"
                 :id="entry.id"
                 :disabled="loading"
                 :labels="labels"