From 8c1a6b9ef995b24172c5d4adc03f6204a72c8422 Mon Sep 17 00:00:00 2001
From: PadBro <padmaster2012@googlemail.com>
Date: Fri, 26 Dec 2025 12:31:25 +0100
Subject: [PATCH] feat: read own tickets

---
 app/components/card/application.vue         |  2 +-
 app/components/card/bot-token.vue           |  2 +-
 app/components/card/ticket.vue              |  2 +-
 app/components/ticket/action-cell.vue       |  2 +-
 app/layouts/default.vue                     |  8 ++++----
 app/pages/index.vue                         |  8 ++++----
 app/pages/ticket/index.vue                  |  2 +-
 app/pages/ticket/transcript/[ticket_id].vue |  3 ++-
 app/utils/helper.ts                         | 15 +++++++++++++--
 9 files changed, 28 insertions(+), 16 deletions(-)

diff --git a/app/components/card/application.vue b/app/components/card/application.vue
index deb89f9..080c24c 100644
--- a/app/components/card/application.vue
+++ b/app/components/card/application.vue
@@ -17,7 +17,7 @@ const { data } = await useApi<FullResponse<ApplicationSubmissionData[]>>(
 </script>
 
 <template>
-  <UCard v-if="hasPermissionTo('applicationSubmission.read')" variant="subtle">
+  <UCard variant="subtle">
     <template #header>
       Pending Applications
       <UBadge variant="subtle">{{ data?.data?.length }}</UBadge>
diff --git a/app/components/card/bot-token.vue b/app/components/card/bot-token.vue
index a73bbbd..3166794 100644
--- a/app/components/card/bot-token.vue
+++ b/app/components/card/bot-token.vue
@@ -26,7 +26,7 @@ const copyBotToken = () => {
 </script>
 
 <template>
-  <UCard v-if="hasPermissionTo('owner')" variant="subtle">
+  <UCard variant="subtle">
     <template #header>
       <p>Bot token</p>
     </template>
diff --git a/app/components/card/ticket.vue b/app/components/card/ticket.vue
index 169f51c..ff772fc 100644
--- a/app/components/card/ticket.vue
+++ b/app/components/card/ticket.vue
@@ -11,7 +11,7 @@ const { data } = await useApi<FullResponse<TicketData[]>>("/ticket", {
 </script>
 
 <template>
-  <UCard v-if="hasPermissionTo('ticket.read')" variant="subtle">
+  <UCard variant="subtle">
     <template #header>
       Open Tickets
       <UBadge variant="subtle">{{ data?.data?.length }}</UBadge>
diff --git a/app/components/ticket/action-cell.vue b/app/components/ticket/action-cell.vue
index 751cbff..3a23a1e 100644
--- a/app/components/ticket/action-cell.vue
+++ b/app/components/ticket/action-cell.vue
@@ -32,7 +32,7 @@ const closeTicket = async () => {
 <template>
   <div class="space-x-2">
     <UButton
-      v-if="hasPermissionTo('ticketTranscript.read')"
+      v-if="hasPermissionTo(['ticketTranscript.read', 'ticketTranscript.read-own'])"
       label="Transcript"
       size="md"
       icon="material-symbols:drive-file-rename-outline-outline"
diff --git a/app/layouts/default.vue b/app/layouts/default.vue
index 33e5e08..df8bf0e 100644
--- a/app/layouts/default.vue
+++ b/app/layouts/default.vue
@@ -25,12 +25,12 @@ const items: NavigationMenuItem[] = [
     label: "Tickets",
     icon: "famicons:ticket-outline",
     to: "/ticket",
-    permission: "ticket.read",
+    permission: ["ticket.read", "ticket.read-own"],
     children: [
       {
         label: "Current tickets",
         to: "/ticket",
-        permission: "ticket.read",
+        permission: ["ticket.read", "ticket.read-own"],
       },
       {
         label: "Config",
@@ -98,13 +98,13 @@ const filteredItems = items
       return navigation;
     }
     navigation.children = navigation.children.filter((child) =>
-      hasPermissionTo(child.permission),
+      child.permission ? hasPermissionTo(child.permission) : true,
     );
     return navigation;
   })
   .filter(
     (navigation) =>
-      hasPermissionTo(navigation.permission) || navigation.children?.length,
+      (navigation.permission ? hasPermissionTo(navigation.permission) : true) || navigation.children?.length,
   );
 
 const footerItems: NavigationMenuItem[] = [
diff --git a/app/pages/index.vue b/app/pages/index.vue
index 29dc804..2828920 100644
--- a/app/pages/index.vue
+++ b/app/pages/index.vue
@@ -13,10 +13,10 @@ useHead({
 
     <template #body>
       <p class="text-2xl">Hello {{ user?.nickname }}</p>
-      <div class="columns-1 md:columns-2 gap-4">
-        <CardApplication class="mb-4" />
-        <CardTicket class="mb-4" />
-        <CardBotToken class="mb-4" />
+      <div class="columns-1 md:columns-2 gap-4 space-y-4">
+        <CardApplication v-if="hasPermissionTo('applicationSubmission.read')" />
+        <CardTicket v-if="hasPermissionTo(['ticket.read', 'ticket.read-own'])" />
+        <CardBotToken v-if="hasPermissionTo('owner')" />
       </div>
     </template>
   </UDashboardPanel>
diff --git a/app/pages/ticket/index.vue b/app/pages/ticket/index.vue
index d39f373..91054f4 100644
--- a/app/pages/ticket/index.vue
+++ b/app/pages/ticket/index.vue
@@ -107,7 +107,7 @@ watch(page, loadTickets);
 
 definePageMeta({
   permission: {
-    permission: "ticket.read",
+    permission: ["ticket.read", "ticket.read-own"],
   },
 });
 
diff --git a/app/pages/ticket/transcript/[ticket_id].vue b/app/pages/ticket/transcript/[ticket_id].vue
index 233b020..a062a69 100644
--- a/app/pages/ticket/transcript/[ticket_id].vue
+++ b/app/pages/ticket/transcript/[ticket_id].vue
@@ -5,6 +5,7 @@ import type { PaginatedResponse } from "@/types/response";
 
 const route = useRoute();
 const ticket = ref<TicketData>();
+const user = useCurrentUser();
 
 const { data } = await useApi<PaginatedResponse<TicketData[]>>("/ticket", {
   method: "get",
@@ -18,7 +19,7 @@ ticket.value = data.value?.data[0];
 
 definePageMeta({
   permission: {
-    permission: "ticketTranscript.read",
+    permission: ["ticketTranscript.read", "ticketTranscript.read-own"],
   },
 });
 
diff --git a/app/utils/helper.ts b/app/utils/helper.ts
index 62384e3..3782e68 100644
--- a/app/utils/helper.ts
+++ b/app/utils/helper.ts
@@ -12,12 +12,23 @@ export const parseRouteParameter = (
   return Number.isNaN(value) ? 0 : value;
 };
 
-export const hasPermissionTo = (permission: string): boolean => {
+export const hasPermissionTo = (
+  permission: string | string[]
+): boolean => {
   const user = useCurrentUser().value;
   if (!user) {
     return false;
   }
-  return user.permissions.includes(permission) || user.is_owner;
+
+  if (user.is_owner) {
+    return true;
+  }
+
+  const permissions = Array.isArray(permission)
+    ? permission
+    : [permission];
+
+  return permissions.some(p => user.permissions.includes(p));
 };
 
 // replace with enum from api