From 0706ceed122135a80ee3df14083b5108c6743fb6 Mon Sep 17 00:00:00 2001
From: Tiago Vasconcelos <talvasconcelos@gmail.com>
Date: Thu, 8 Dec 2022 10:35:13 +0000
Subject: [PATCH] restrict non super user admins actions

---
 .../admin/templates/admin/_tab_funding.html   | 63 ++++++++++---------
 1 file changed, 33 insertions(+), 30 deletions(-)

diff --git a/lnbits/extensions/admin/templates/admin/_tab_funding.html b/lnbits/extensions/admin/templates/admin/_tab_funding.html
index a69ecb47e..3887e151f 100644
--- a/lnbits/extensions/admin/templates/admin/_tab_funding.html
+++ b/lnbits/extensions/admin/templates/admin/_tab_funding.html
@@ -21,6 +21,7 @@
             <div class="col-12">
               <p>Active Funding<small> (Requires server restart)</small></p>
               <q-select
+                :disable="!isSuperUser"
                 filled
                 v-model="formData.lnbits_backend_wallet_class"
                 hint="Select the active funding wallet"
@@ -56,37 +57,39 @@
           </div>
         </div>
       </div>
-      <p class="q-my-md">
-        Funding Sources<small> (Requires server restart)</small>
-      </p>
-      <q-list
-        v-for="(fund, idx) in settings.lnbits_allowed_funding_sources"
-        :key="idx"
-      >
-        <q-expansion-item
-          expand-separator
-          icon="payments"
-          :label="fund"
-          v-if="funding_sources.get(fund)"
+      <div v-if="isSuperUser">
+        <p class="q-my-md">
+          Funding Sources<small> (Requires server restart)</small>
+        </p>
+        <q-list
+          v-for="(fund, idx) in settings.lnbits_allowed_funding_sources"
+          :key="idx"
         >
-          <q-card>
-            <q-card-section
-              v-for="([key, prop], i) in Object.entries(funding_sources.get(fund))"
-              :key="i"
-            >
-              <q-input
-                dense
-                filled
-                type="text"
-                v-model="formData[key]"
-                :label="prop.label"
-                class="q-pr-md"
-                :hint="prop.hint"
-              ></q-input>
-            </q-card-section>
-          </q-card>
-        </q-expansion-item>
-      </q-list>
+          <q-expansion-item
+            expand-separator
+            icon="payments"
+            :label="fund"
+            v-if="funding_sources.get(fund)"
+          >
+            <q-card>
+              <q-card-section
+                v-for="([key, prop], i) in Object.entries(funding_sources.get(fund))"
+                :key="i"
+              >
+                <q-input
+                  dense
+                  filled
+                  type="text"
+                  v-model="formData[key]"
+                  :label="prop.label"
+                  class="q-pr-md"
+                  :hint="prop.hint"
+                ></q-input>
+              </q-card-section>
+            </q-card>
+          </q-expansion-item>
+        </q-list>
+      </div>
     </div>
   </q-card-section>
 </q-tab-panel>