Fixed: if a nested folder has edit rights for processes all processes in the parent folders appear to be editable even though the changes are not commited

Processes are now only shown in the editor list if the user has edit
rights in the specific folder.

Author: jjoderis

src/management-system-v2/app/(dashboard)/[environmentId]/processes/[mode]/[processId]/page.tsx

@@ -70,7 +70,7 @@ const ProcessComponent = async (props: ProcessComponentProps) => {
   //   return acc;
   // }, {} as UserType);
 
-  if (!ability.can('view', toCaslResource('Process', process))) {
+  if (!ability.can(props.isListView ? 'view' : 'manage', toCaslResource('Process', process))) {
     throw new UnauthorizedError();
   }
 

src/management-system-v2/app/(dashboard)/[environmentId]/processes/[mode]/folder/[folderId]/page.tsx

@@ -16,6 +16,7 @@ import EllipsisBreadcrumb from '@/components/ellipsis-breadcrumb';
 import { ComponentProps } from 'react';
 import { spaceURL } from '@/lib/utils';
 import { getFolderById, getRootFolder, getFolderContents } from '@/lib/data/db/folders';
+import { toCaslResource } from '@/lib/ability/caslAbility';
 export type ListItem = ProcessMetadata | (Folder & { type: 'folder' });
 
 const ProcessesPage = async (props: {
@@ -39,9 +40,12 @@ const ProcessesPage = async (props: {
 
   const folderContentsFiltered = isListView
     ? folderContents.filter(
-        (folderContent) => folderContent.type === 'folder' || folderContent.versions.length > 0,
-      )
-    : folderContents;
+      (folderContent) => folderContent.type === 'folder' || folderContent.versions.length > 0,
+    )
+    : folderContents.filter(
+      (entry) =>
+        entry.type === 'folder' || ability.can('update', toCaslResource('Process', entry)),
+    );
 
   const hasNoReleasedProcesses = isListView
     ? folderContentsFiltered.every((item) => item.type === 'folder')