From 5fb01f01bf998eff837873d45873a5caafeb2acd Mon Sep 17 00:00:00 2001
From: rubenwardy <rw@rubenwardy.com>
Date: Wed, 9 Dec 2020 23:08:39 +0000
Subject: [PATCH] Fix broken audit links for normal users

---
 app/templates/admin/audit.html      | 2 +-
 app/templates/macros/audit_log.html | 4 ++--
 app/templates/users/account.html    | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/app/templates/admin/audit.html b/app/templates/admin/audit.html
index 823c629..1f3dcc4 100644
--- a/app/templates/admin/audit.html
+++ b/app/templates/admin/audit.html
@@ -11,6 +11,6 @@ Audit Log
 	{% from "macros/audit_log.html" import render_audit_log %}
 
 	{{ render_pagination(pagination, url_set_query) }}
-	{{ render_audit_log(log) }}
+	{{ render_audit_log(log, current_user) }}
 	{{ render_pagination(pagination, url_set_query) }}
 {% endblock %}
diff --git a/app/templates/macros/audit_log.html b/app/templates/macros/audit_log.html
index 5ef8e27..6e89575 100644
--- a/app/templates/macros/audit_log.html
+++ b/app/templates/macros/audit_log.html
@@ -1,8 +1,8 @@
-{% macro render_audit_log(log) -%}
+{% macro render_audit_log(log, current_user) -%}
 	<div class="list-group mt-3">
 		{% for entry in log %}
 			<a class="list-group-item list-group-item-action"
-				{% if entry.description %}
+				{% if entry.description and current_user.rank.atLeast(current_user.rank.MODERATOR) %}
 					href="{{ url_for('admin.audit_view', id=entry.id) }}">
 				{% else %}
 					href="{{ entry.url }}">
diff --git a/app/templates/users/account.html b/app/templates/users/account.html
index 0ba136b..9d6fb31 100644
--- a/app/templates/users/account.html
+++ b/app/templates/users/account.html
@@ -66,7 +66,7 @@
 <h3>{{ _("Recent Account Actions") }}</h3>
 
 {% from "macros/audit_log.html" import render_audit_log %}
-{{ render_audit_log(user.audit_log_entries.limit(10).all()) }}
+{{ render_audit_log(user.audit_log_entries.limit(10).all(), current_user) }}
 
 <h3>{{ _("Account Deletion and Deactivation") }}</h3>