berechtigungen

myteamwallet_frontend_modern/src/app/features/team/cashbox/cashbox.ts

@@ -13,7 +13,7 @@ import { MatInputModule } from '@angular/material/input';
 import { MatProgressSpinnerModule } from '@angular/material/progress-spinner';
 import { MatSelectModule } from '@angular/material/select';
 import { MatSnackBar, MatSnackBarModule } from '@angular/material/snack-bar';
-import { AuthStore } from '../../../core/auth/auth-store';
+import { TeamPermissionsService } from '../../../core/team/team-permissions';
 import { PenaltyApi } from '../../../core/team/penalty-api';
 import { TeamStore } from '../../../core/team/team-store';
 import { TransactionsApi } from '../../../core/team/transactions-api';
@@ -55,10 +55,10 @@ const HIGH_AMOUNT_CONFIRM_THRESHOLD = 300;
   styleUrl: './cashbox.scss',
 })
 export class Cashbox {
-  private readonly authStore = inject(AuthStore);
   private readonly dialog = inject(MatDialog);
   private readonly formBuilder = inject(FormBuilder);
   private readonly penaltyApi = inject(PenaltyApi);
+  private readonly permissions = inject(TeamPermissionsService);
   private readonly route = inject(ActivatedRoute);
   private readonly router = inject(Router);
   private readonly snackBar = inject(MatSnackBar);
@@ -85,15 +85,9 @@ export class Cashbox {
     { id: 14, label: 'Ausgabe' },
   ];
 
-  protected readonly canBook = computed(() => {
-    const user = this.authStore.currentUser();
-    if (user?.role?.id === 1) return true;
-    return (
-      this.team()?.players?.some(
-        (player) => player.user?.id === user?.id && (player.teamRole?.id ?? 0) >= 2,
-      ) ?? false
-    );
-  });
+  protected readonly canBook = computed(() =>
+    this.permissions.canDo(this.team(), 'transactionCreate'),
+  );
 
   protected readonly activePlayers = computed(() =>
     (this.team()?.players ?? []).filter((player) => player.active),
@@ -206,7 +200,7 @@ export class Cashbox {
 
   protected canReverse(activity: TeamActivity): boolean {
     return (
-      this.canBook() &&
+      this.permissions.canDo(this.team(), 'transactionReverse') &&
       !activity.isTeamWalletTransaction &&
       !activity.note?.startsWith('Stornierung von Buchung #')
     );