SimoandCursor
0e89d03940
Replace leftover requireStaff gates with module PERMS, drop hardcoded room rank thresholds, and expand contract tests so admin mutations cannot regress to dashboard-only checks. Co-authored-by: Cursor <[email protected]>
66 lines
1.9 KiB
TypeScript
66 lines
1.9 KiB
TypeScript
import { Megaphone } from "lucide-react";
|
|
import Link from "next/link";
|
|
import { notFound, redirect } from "next/navigation";
|
|
import { deleteAd, updateAd } from "@/actions/admin-ads";
|
|
import { prisma } from "@/lib/prisma";
|
|
import { canAccess, getAdminContext, PERMS } from "@/lib/permissions";
|
|
|
|
export const dynamic = "force-dynamic";
|
|
|
|
export default async function EditAd({
|
|
params,
|
|
}: {
|
|
params: Promise<{ id: string }>;
|
|
}) {
|
|
const { session, permissions } = await getAdminContext();
|
|
if (!canAccess(permissions, PERMS.PAGES_VIEW, session.user.rank)) {
|
|
redirect("/admin");
|
|
}
|
|
|
|
const { id } = await params;
|
|
let ad: Awaited<ReturnType<typeof prisma.websiteAds.findUnique>> = null;
|
|
try {
|
|
ad = await prisma.websiteAds.findUnique({ where: { id: BigInt(id) } });
|
|
} catch {
|
|
notFound();
|
|
}
|
|
if (!ad) notFound();
|
|
|
|
return (
|
|
<main>
|
|
<div className="flex items-center gap-3 mb-6">
|
|
<div className="w-10 h-10 rounded-xl bg-gradient-to-br from-[var(--admin-accent)]/20 to-[var(--admin-accent)]/5 grid place-items-center">
|
|
<Megaphone size={20} className="text-[var(--admin-accent)]" />
|
|
</div>
|
|
<div>
|
|
<h1 className="m-0 text-xl font-extrabold text-[var(--admin-text)]">
|
|
Edit advertisement
|
|
</h1>
|
|
<p className="m-0 text-xs text-[var(--admin-text-muted)] mt-0.5">
|
|
<Link href="/admin/ads">← Advertisements</Link>
|
|
</p>
|
|
</div>
|
|
</div>
|
|
<form action={updateAd} className="admin-card">
|
|
<input type="hidden" name="id" value={String(ad.id)} />
|
|
<input
|
|
name="image"
|
|
defaultValue={ad.image}
|
|
placeholder="Image URL"
|
|
required
|
|
maxLength={255}
|
|
/>
|
|
<button type="submit" className="btn btn-primary">
|
|
Save
|
|
</button>
|
|
</form>
|
|
<form action={deleteAd} style={{ marginTop: "1rem" }}>
|
|
<input type="hidden" name="id" value={String(ad.id)} />
|
|
<button type="submit" className="btn btn-danger">
|
|
Delete advertisement
|
|
</button>
|
|
</form>
|
|
</main>
|
|
);
|
|
}
|