[5.x] Hide "Edit" button on relationship fieldtypes when user is missing permissions (#11748)

Author: duncanmcclean

resources/js/components/inputs/relationship/RelationshipInput.vue

@@ -28,7 +28,7 @@
                     :item="item"
                     :config="config"
                     :status-icon="statusIcons"
-                    :editable="canEdit"
+                    :editable="canEdit && (item.editable || item.editable === undefined)"
                     :sortable="!readOnly && canReorder"
                     :read-only="readOnly"
                     :form-component="formComponent"

src/Fieldtypes/Terms.php

@@ -373,6 +373,7 @@ protected function toItemArray($id)
             'published' => $term->published(),
             'private' => $term->private(),
             'edit_url' => $term->editUrl(),
+            'editable' => User::current()->can('edit', $term),
             'hint' => $this->getItemHint($term),
         ];
     }

src/Fieldtypes/Users.php

@@ -90,6 +90,7 @@ protected function toItemArray($id, $site = null)
                 'title' => $user->name(),
                 'id' => $id,
                 'edit_url' => $user->editUrl(),
+                'editable' => User::current()->can('edit', $user),
             ];
         }
 

src/Http/Resources/CP/Entries/EntriesFieldtypeEntry.php

@@ -3,6 +3,7 @@
 namespace Statamic\Http\Resources\CP\Entries;
 
 use Illuminate\Http\Resources\Json\JsonResource;
+use Statamic\Facades\User;
 use Statamic\Fieldtypes\Entries as EntriesFieldtype;
 
 class EntriesFieldtypeEntry extends JsonResource
@@ -23,6 +24,7 @@ public function toArray($request)
             'title' => $this->resource->value('title'),
             'status' => $this->resource->status(),
             'edit_url' => $this->resource->editUrl(),
+            'editable' => User::current()->can('edit', $this->resource),
             'hint' => $this->fieldtype->getItemHint($this->resource),
         ];