implement feature to disable veiw source code without rights

Author: JamesHow1ett

public/js/index.js

@@ -423,6 +423,8 @@ Visibility.change(function (e, state) {
 
 // when page ready
 $(document).ready(function () {
+  if (ui.toolbar.edit.data('blockSource')) { replaceUrl(window.location.href) }
+
   idle.checkAway()
   checkResponsive()
   // if in smaller screen, we don't need advanced scrollbar
@@ -478,7 +480,7 @@ $(document).ready(function () {
     changeMode(modeType.view)
   })
   key('ctrl+alt+b', function (e) {
-    if (ui.toolbar.edit.data('blockSource')) return
+    if (ui.toolbar.both.data('blockSource')) return
     changeMode(modeType.both)
   })
   // toggle-dropdown
@@ -502,6 +504,19 @@ $(window).on('error', function () {
   // setNeedRefresh();
 })
 
+// replace url if user have not rights to veiw source code
+function replaceUrl(url) {
+  const urlHasEdit = /\?edit/;
+  const urlHasBoth = /\?both/;
+  if (urlHasEdit.test(url)) {
+    let newUrl = url.toString().replace(urlHasEdit, '?view');
+    window.location.replace(newUrl);
+  } else if (urlHasBoth.test(url)) {
+    let newUrl = url.toString().replace(urlHasBoth, '?view');
+    window.location.replace(newUrl);
+  }
+}
+
 setupSyncAreas(ui.area.codemirrorScroll, ui.area.view, ui.area.markdown, editor)
 
 function autoSyncscroll () {
@@ -1570,10 +1585,12 @@ function importFromUrl (url) {
 
 // mode
 ui.toolbar.mode.click(function () {
+  if (ui.toolbar.mode.data('blockSource')) return
   toggleMode()
 })
 // edit
 ui.toolbar.edit.click(function () {
+  if (ui.toolbar.edit.data('blockSource')) return
   changeMode(modeType.edit)
 })
 // view
@@ -1582,6 +1599,7 @@ ui.toolbar.view.click(function () {
 })
 // both
 ui.toolbar.both.click(function () {
+  if (ui.toolbar.both.data('blockSource')) return
   changeMode(modeType.both)
 })
 

public/views/codimd/header.ejs

@@ -76,28 +76,34 @@
                 <li role="presentation"><a role="menuitem" class="ui-help" href="#" data-toggle="modal" data-target=".help-modal"><i class="fa fa-question-circle fa-fw"></i> Help</a>
                 </li>
             </ul>
-            <a class="btn btn-link ui-mode">
+            <% if ((permission === "limited" || "editable" || "freely") && !allowVisibleSource) { %>
+            <a class="btn btn-link ui-mode" data-block-source="<%= !allowVisibleSource %>">
                 <i class="fa fa-pencil"></i>
             </a>
+            <% } else { %>
+            <a class="btn btn-link ui-mode" data-block-source="<%= !allowVisibleSource %>">
+                <i class="fa fa-pencil"></i>
+            </a>
+            <% } %>
         </div>
     </div>
     <div class="collapse navbar-collapse">
         <ul class="nav navbar-nav navbar-form navbar-left" style="padding:0;">
             <div class="btn-group" data-toggle="buttons">
                 <% if ((permission === "limited" || "editable" || "freely") && !allowVisibleSource) { %>
-                    <label class="btn btn-default ui-edit" data-block-source="true" title="<%= __('You have no rights to edit this note')%>" disabled>
-                        <input type="radio" autocomplete="off"><i class="fa fa-pencil"></i>
-                    </label>
-                    <label class="btn btn-default ui-both" data-block-source="true" title="<%= __('You have no rights to edit this note')%>" disabled>
-                        <input type="radio" autocomplete="off"><i class="fa fa-columns"></i>
-                    </label>
+                <label class="btn btn-default ui-edit" data-block-source="<%= !allowVisibleSource %>" title="<%= __('You have no rights to edit this note') %>" disabled>
+                    <input type="radio" autocomplete="off"><i class="fa fa-pencil"></i>
+                </label>
+                <label class="btn btn-default ui-both" data-block-source="<%= !allowVisibleSource %>" title="<%= __('You have no rights to edit this note') %>" disabled>
+                    <input type="radio" autocomplete="off"><i class="fa fa-columns"></i>
+                </label>
                     <% } else { %>
-                    <label class="btn btn-default ui-edit" title="<%= __('Edit') %> (Ctrl+Alt+E)">
-                        <input type="radio" name="mode" autocomplete="off"><i class="fa fa-pencil"></i>
-                    </label>
-                    <label class="btn btn-default ui-both" title="<%= __('Both') %> (Ctrl+Alt+B)">
-                        <input type="radio" name="mode" autocomplete="off"><i class="fa fa-columns"></i>
-                    </label>
+                <label class="btn btn-default ui-edit" data-block-source="<%= !allowVisibleSource %>" title="<%= __('Edit') %> (Ctrl+Alt+E)">
+                    <input type="radio" name="mode" autocomplete="off"><i class="fa fa-pencil"></i>
+                </label>
+                <label class="btn btn-default ui-both" data-block-source="<%= !allowVisibleSource %>" title="<%= __('Both') %> (Ctrl+Alt+B)">
+                    <input type="radio" name="mode" autocomplete="off"><i class="fa fa-columns"></i>
+                </label>
                 <% } %>
                 <label class="btn btn-default ui-view" title="<%= __('View') %> (Ctrl+Alt+V)">
                     <input type="radio" name="mode" autocomplete="off"><i class="fa fa-eye"></i>

public/views/index/body.ejs

@@ -4,7 +4,7 @@
 
             <div class="masthead clearfix">
                 <div class="inner">
-                    <h3 class="masthead-brand"></h3>allowAnonymousViews
+                    <h3 class="masthead-brand"></h3>
                     <nav>
                         <ul class="nav masthead-nav">
                             <li class="ui-home<% if(!signin) { %> active<% } %>"><a href="#"><%= __('Intro') %></a>