From 0e27f0d095c64a75f52a53860b138da923ad3555 Mon Sep 17 00:00:00 2001
From: citrons <citrons@mondecitronne.com>
Date: Mon, 16 Jun 2025 21:25:09 -0500
Subject: don't show the role list to non-bureaucrats

---
 apioforum/templates/role_assignment.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/apioforum/templates/role_assignment.html b/apioforum/templates/role_assignment.html
index 4017897..f5d6e1d 100644
--- a/apioforum/templates/role_assignment.html
+++ b/apioforum/templates/role_assignment.html
@@ -54,9 +54,9 @@
 {% if can_change %}<input type="submit" value="confirm" form="role-form">{% endif %}
 	<a href="{{url_for('forum.view_user_role',forum_id=forum.id)}}">cancel</a>
 </p>
-{% else %}
+{% elif role_assignments and is_bureaucrat(forum.id, g.user) %}
 <p><a href="{{url_for('forum.view_forum',forum_id=forum.id)}}">back</a></p>
-{% if role_assignments %}<h2>assigned roles</h2>{% endif %}
+<h2>assigned roles</h2>
 <table class="role-list">
 	{% for ass in role_assignments %}
 		{% set can_change = ass.role == "other" or is_bureaucrat(forum.id, g.user) %}
-- 
cgit v1.2.3