Remove ledger access from viewer role

templates/_league_sidebar.html

@@ -51,7 +51,7 @@
             <span>Leaderboard</span>
         </a>
 
-        {% if is_logged_in %}
+        {% if can_manage is defined and can_manage %}
         <a class="sidebar__link {{ 'is-active' if request.endpoint == 'leagues.ledger' }}"
            href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">
             <svg viewBox="0 0 16 16" fill="none" aria-hidden="true">

templates/_league_subnav.html

@@ -7,7 +7,7 @@
             <a class="subnav__link {{ 'is-active' if request.endpoint in ('leagues.sessions', 'leagues.session_detail') }}" href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">Sessions</a>
             <a class="subnav__link {{ 'is-active' if request.endpoint in ('leagues.players', 'leagues.player_detail') }}" href="{{ url_for('leagues.players', league_ref=league.url_ref) }}">Players</a>
             <a class="subnav__link {{ 'is-active' if request.endpoint == 'leagues.leaderboard' }}" href="{{ url_for('leagues.leaderboard', league_ref=league.url_ref) }}">Leaderboard</a>
-            {% if is_logged_in %}
+            {% if can_manage is defined and can_manage %}
             <a class="subnav__link {{ 'is-active' if request.endpoint == 'leagues.ledger' }}" href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">Ledger</a>
             {% endif %}
             {% if is_owner is defined and is_owner %}

templates/league_dashboard.html

@@ -307,6 +307,7 @@
         <span class="db-nav-tile__arrow">→</span>
     </a>
 
+    {% if can_manage %}
     <a class="db-nav-tile db-nav-tile--ledger" href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">
         <div class="db-nav-tile__icon">
             <svg width="22" height="22" viewBox="0 0 24 24" fill="none" aria-hidden="true">
@@ -322,6 +323,7 @@
         </div>
         <span class="db-nav-tile__arrow">→</span>
     </a>
+    {% endif %}
 
 </div>
 

templates/leagues_index.html

@@ -111,7 +111,9 @@
                     <a class="btn btn--primary btn--sm" href="{{ url_for('leagues.dashboard', league_ref=league.url_ref) }}">Open league</a>
                     <a class="li-action-link" href="{{ url_for('leagues.sessions', league_ref=league.url_ref) }}">Sessions</a>
                     <a class="li-action-link" href="{{ url_for('leagues.leaderboard', league_ref=league.url_ref) }}">Leaderboard</a>
+                    {% if membership.role in ('owner', 'manager') %}
                     <a class="li-action-link" href="{{ url_for('leagues.ledger', league_ref=league.url_ref) }}">Ledger</a>
+                    {% endif %}
                 </div>
             </div>
         </div>