From 62bd8e3c954ae1ac3f5a4a15ca71fae9f0cb997c Mon Sep 17 00:00:00 2001
From: Mauricio Siu <47042324+Siumauricio@users.noreply.github.com>
Date: Sat, 8 Mar 2025 18:51:59 -0600
Subject: [PATCH] feat(services): add role-based delete service permissions

- Restrict bulk delete action to owners and users with delete service permissions
- Conditionally render delete button based on user role and authorization
- Improve service management security by implementing fine-grained access control
---
 .../pages/dashboard/project/[projectId].tsx   | 30 +++++++++++--------
 1 file changed, 17 insertions(+), 13 deletions(-)

diff --git a/apps/dokploy/pages/dashboard/project/[projectId].tsx b/apps/dokploy/pages/dashboard/project/[projectId].tsx
index 0bbca7a06..d1dd33ea2 100644
--- a/apps/dokploy/pages/dashboard/project/[projectId].tsx
+++ b/apps/dokploy/pages/dashboard/project/[projectId].tsx
@@ -668,20 +668,24 @@ const Project = (
 															Stop
 														</Button>
 													</DialogAction>
-													<DialogAction
-														title="Delete Services"
-														description={`Are you sure you want to delete ${selectedServices.length} services? This action cannot be undone.`}
-														type="destructive"
-														onClick={handleBulkDelete}
-													>
-														<Button
-															variant="ghost"
-															className="w-full justify-start text-destructive"
+													{(auth?.role === "owner" ||
+														auth?.canDeleteServices) && (
+														<DialogAction
+															title="Delete Services"
+															description={`Are you sure you want to delete ${selectedServices.length} services? This action cannot be undone.`}
+															type="destructive"
+															onClick={handleBulkDelete}
 														>
-															<Trash2 className="mr-2 h-4 w-4" />
-															Delete
-														</Button>
-													</DialogAction>
+															<Button
+																variant="ghost"
+																className="w-full justify-start text-destructive"
+															>
+																<Trash2 className="mr-2 h-4 w-4" />
+																Delete
+															</Button>
+														</DialogAction>
+													)}
+
 													<Dialog
 														open={isMoveDialogOpen}
 														onOpenChange={setIsMoveDialogOpen}