[UI Bug] Unauthorized 'Edit' and 'Delete' buttons visible on /bounties page

Open
#238 12 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
3/5
Estimated time
1-2 days
Newbie friendliness
65/100
Issue type
Bug
Clarity
Clearly specified
Activity status
Quiet
Tech stack
elixir
Domain
frontend

Research direction

Start at the /bounties page and trace where bounty cards render the "Edit Amount" and "Delete" buttons. Reproduce the behavior with a bounty owned by another user or organization, then verify that unauthorized users no longer see those actions while authorized users retain them.

Written by the indexing model from the issue text.

Description

[UI Bug] Unauthorized 'Edit Amount' and 'Delete' buttons visible to non-owners

Summary

On the bounties listing page, the "Edit Amount" and "Delete" buttons are being rendered for users who do not have administrative permissions over the bounty. While the backend correctly prevents the action (showing an "Unauthorized" message), the buttons should be hidden entirely from the UI for non-authorized users.

Steps to Reproduce
  1. Log in to Algora.io.
  2. Navigate to the bounties page (e.g., algora.io/bounties).
  3. Locate a bounty created by another user/org (e.g., the $2,500 IMAP bounty).
  4. Observe that the "Edit Amount" and "Delete" buttons are visible on the card.
  5. Click either button; a toast notification appears stating: "You are not authorized to edit bounty amounts".
Expected Behavior

The UI should perform a permission check before rendering these action buttons. If the current user session is not authorized to modify the bounty, these buttons should not be visible.

Actual Behavior

The buttons are visible to all logged-in users, leading to a confusing UX where the user is presented with actions they cannot perform.

Visual Proof
Image
Environment
  • URL: https://algora.io/bounties
  • Browser: Chrome/Firefox
Dominant language
Elixir
Stars
1.5k
Forks
152
No merged PRs in 30d

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from algora-io/algora

All issues in algora-io/algora

Similar issues

More Elixir issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.