From eb35cd023a3f4a52ae4d5f164ff132e667f04b81 Mon Sep 17 00:00:00 2001
From: Scott Idem <stidem@gmail.com>
Date: Wed, 4 Mar 2026 16:50:35 -0500
Subject: [PATCH] fix(idaa): restrict Show/Hide Disabled buttons to
 manager_access + edit_mode
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Disabled items are treated as functionally deleted for all end clients
(including Trusted Access staff). Only Manager + Edit Mode should see
Show/Hide Disabled controls — previously using administrator_access and
missing edit_mode gate in BB and archives.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .../[archive_id]/ae_idaa_comp__archive_obj_id_view.svelte     | 4 ++--
 src/routes/idaa/(idaa)/bb/ae_idaa_comp__post_options.svelte   | 4 ++--
 .../recovery_meetings/ae_idaa_comp__event_obj_qry.svelte      | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/src/routes/idaa/(idaa)/archives/[archive_id]/ae_idaa_comp__archive_obj_id_view.svelte b/src/routes/idaa/(idaa)/archives/[archive_id]/ae_idaa_comp__archive_obj_id_view.svelte
index 8e701a66..e97570cf 100644
--- a/src/routes/idaa/(idaa)/archives/[archive_id]/ae_idaa_comp__archive_obj_id_view.svelte
+++ b/src/routes/idaa/(idaa)/archives/[archive_id]/ae_idaa_comp__archive_obj_id_view.svelte
@@ -168,7 +168,7 @@
                         </button>
                     {/if}
 
-                    {#if $ae_loc.edit_mode && $ae_loc.administrator_access && (!$idaa_loc.archives.qry__enabled || $idaa_loc.archives.qry__enabled == 'enabled')}
+                    {#if $ae_loc.edit_mode && $ae_loc.manager_access && (!$idaa_loc.archives.qry__enabled || $idaa_loc.archives.qry__enabled == 'enabled')}
                         <button
                             type="button"
                             onclick={() => {
@@ -182,7 +182,7 @@
                         >
                             <span class="fas fa-eye m-1"></span> Show Disabled Events
                         </button>
-                    {:else if $ae_loc.administrator_access && $idaa_loc.archives.qry__enabled != 'enabled'}
+                    {:else if $ae_loc.edit_mode && $ae_loc.manager_access && $idaa_loc.archives.qry__enabled != 'enabled'}
                         <button
                             type="button"
                             onclick={() => {
diff --git a/src/routes/idaa/(idaa)/bb/ae_idaa_comp__post_options.svelte b/src/routes/idaa/(idaa)/bb/ae_idaa_comp__post_options.svelte
index 8e15a39c..d2b7e21a 100644
--- a/src/routes/idaa/(idaa)/bb/ae_idaa_comp__post_options.svelte
+++ b/src/routes/idaa/(idaa)/bb/ae_idaa_comp__post_options.svelte
@@ -134,7 +134,7 @@
             </button>
         {/if}
 
-        {#if $ae_loc.administrator_access && (!$idaa_loc.bb.qry__enabled || $idaa_loc.bb.qry__enabled == 'enabled')}
+        {#if $ae_loc.edit_mode && $ae_loc.manager_access && (!$idaa_loc.bb.qry__enabled || $idaa_loc.bb.qry__enabled == 'enabled')}
             <button type="button"
                 onclick={() => {
                     $idaa_loc.bb.qry__enabled = 'all';
@@ -151,7 +151,7 @@
             >
                 <span class="fas fa-eye m-1"></span> Show Disabled Posts
             </button>
-        {:else if $ae_loc.administrator_access && $idaa_loc.bb.qry__enabled != 'enabled'}
+        {:else if $ae_loc.edit_mode && $ae_loc.manager_access && $idaa_loc.bb.qry__enabled != 'enabled'}
             <button type="button"
                 onclick={() => {
                     $idaa_loc.bb.qry__enabled = 'enabled';
diff --git a/src/routes/idaa/(idaa)/recovery_meetings/ae_idaa_comp__event_obj_qry.svelte b/src/routes/idaa/(idaa)/recovery_meetings/ae_idaa_comp__event_obj_qry.svelte
index e9735fe6..7095f34a 100644
--- a/src/routes/idaa/(idaa)/recovery_meetings/ae_idaa_comp__event_obj_qry.svelte
+++ b/src/routes/idaa/(idaa)/recovery_meetings/ae_idaa_comp__event_obj_qry.svelte
@@ -433,7 +433,7 @@
                 </button>
             {/if}
 
-            {#if $ae_loc.edit_mode && $ae_loc.administrator_access && (!$idaa_loc.recovery_meetings.qry__enabled || $idaa_loc.recovery_meetings.qry__enabled == 'enabled')}
+            {#if $ae_loc.edit_mode && $ae_loc.manager_access && (!$idaa_loc.recovery_meetings.qry__enabled || $idaa_loc.recovery_meetings.qry__enabled == 'enabled')}
                 <button
                     type="button"
                     onclick={() => {
@@ -451,7 +451,7 @@
                 >
                     <span class="fas fa-eye m-1"></span> Show Disabled Events
                 </button>
-            {:else if $ae_loc.edit_mode && $ae_loc.administrator_access && $idaa_loc.recovery_meetings.qry__enabled != 'enabled'}
+            {:else if $ae_loc.edit_mode && $ae_loc.manager_access && $idaa_loc.recovery_meetings.qry__enabled != 'enabled'}
                 <button
                     type="button"
                     onclick={() => {