[UI Bug] Unauthorized 'Edit Amount' and 'Delete' buttons visible to non-owners
Summary
On the bounties listing page, the "Edit Amount" and "Delete" buttons are being rendered for users who do not have administrative permissions over the bounty. While the backend correctly prevents the action (showing an "Unauthorized" message), the buttons should be hidden entirely from the UI for non-authorized users.
Steps to Reproduce
- Log in to Algora.io.
- Navigate to the bounties page (e.g.,
algora.io/bounties).
- Locate a bounty created by another user/org (e.g., the $2,500 IMAP bounty).
- Observe that the "Edit Amount" and "Delete" buttons are visible on the card.
- Click either button; a toast notification appears stating:
"You are not authorized to edit bounty amounts".
Expected Behavior
The UI should perform a permission check before rendering these action buttons. If the current user session is not authorized to modify the bounty, these buttons should not be visible.
Actual Behavior
The buttons are visible to all logged-in users, leading to a confusing UX where the user is presented with actions they cannot perform.
Visual Proof
Environment
- URL:
https://algora.io/bounties
- Browser: Chrome/Firefox
[UI Bug] Unauthorized 'Edit Amount' and 'Delete' buttons visible to non-owners
Summary
On the bounties listing page, the "Edit Amount" and "Delete" buttons are being rendered for users who do not have administrative permissions over the bounty. While the backend correctly prevents the action (showing an "Unauthorized" message), the buttons should be hidden entirely from the UI for non-authorized users.
Steps to Reproduce
algora.io/bounties)."You are not authorized to edit bounty amounts".Expected Behavior
The UI should perform a permission check before rendering these action buttons. If the current user session is not authorized to modify the bounty, these buttons should not be visible.
Actual Behavior
The buttons are visible to all logged-in users, leading to a confusing UX where the user is presented with actions they cannot perform.
Visual Proof
Environment
https://algora.io/bounties