From 758ae66dbe858ddc9a8c28de7d44e6c71f3a32ef Mon Sep 17 00:00:00 2001
From: mrilyew <99399973+mrilyew@users.noreply.github.com>
Date: Fri, 17 Jan 2025 18:15:17 +0300
Subject: [PATCH] unauthorized limitations

---
 Web/Presenters/templates/Documents/components/doc.xml   | 2 +-
 Web/Presenters/templates/Documents/components/image.xml | 2 +-
 Web/Presenters/templates/Group/View.xml                 | 6 +++---
 Web/static/js/al_docs.js                                | 3 +++
 Web/static/js/router.js                                 | 8 ++++----
 5 files changed, 12 insertions(+), 9 deletions(-)

diff --git a/Web/Presenters/templates/Documents/components/doc.xml b/Web/Presenters/templates/Documents/components/doc.xml
index 2c0f846b..a9d2d158 100644
--- a/Web/Presenters/templates/Documents/components/doc.xml
+++ b/Web/Presenters/templates/Documents/components/doc.xml
@@ -28,7 +28,7 @@
             </span>{/if}
         </div>
     </div>
-    <div class="doc_volume" n:if="!$hideButtons">
+    <div class="doc_volume" n:if="!$hideButtons && $thisUser">
         <div n:if="!$modifiable" id="report_icon"></div>
         <div n:if="$modifiable" id="edit_icon"></div>
         <div n:if="!$copied || $copied && $copyImportance" id="add_icon"></div>
diff --git a/Web/Presenters/templates/Documents/components/image.xml b/Web/Presenters/templates/Documents/components/image.xml
index c5c39938..159919a1 100644
--- a/Web/Presenters/templates/Documents/components/image.xml
+++ b/Web/Presenters/templates/Documents/components/image.xml
@@ -11,7 +11,7 @@
         <img class="docGalleryItem_gif_preview" loading="lazy" src="{$doc->getURL()}" alt="gif photo view">
     {/if}
 
-    <div class="doc_top_panel doc_shown_by_hover">
+    <div class="doc_top_panel doc_shown_by_hover" n:if="$thisUser">
         <div class="doc_volume_action" n:if="!$modifiable" id="report_icon"></div>
         <div class="doc_volume_action" n:if="$modifiable" id="edit_icon"></div>
         <div class="doc_volume_action" n:if="!$copied || $copied && $copyImportance" id="add_icon"></div>
diff --git a/Web/Presenters/templates/Group/View.xml b/Web/Presenters/templates/Group/View.xml
index e05f5fde..2fd92915 100644
--- a/Web/Presenters/templates/Group/View.xml
+++ b/Web/Presenters/templates/Group/View.xml
@@ -43,7 +43,7 @@
             </tbody>
         </table>
     </div>
-    <div n:if="$club->getFollowersCount() > 0">
+    <div n:if="$thisUser && $club->getFollowersCount() > 0">
         {var $followersCount = $club->getFollowersCount()}
         
         <div class="content_title_expanded" onclick="hidePanel(this, {$followersCount});">
@@ -91,7 +91,7 @@
         </div>
     </div>
 
-    <div>
+    <div n:if="$thisUser">
         <div class="content_title_expanded" onclick="hidePanel(this, {$audiosCount});">
             {_audios}
         </div>
@@ -291,7 +291,7 @@
             </div>
         </div>
     </div>
-    <div n:if="($docsCount > 0 || ($thisUser && $club->canBeModifiedBy($thisUser)))">
+    <div n:if="($thisUser && $docsCount > 0 || ($thisUser && $club->canBeModifiedBy($thisUser)))">
         <div class="content_title_expanded" onclick="hidePanel(this, {$topicsCount});">
             {_documents}
         </div>
diff --git a/Web/static/js/al_docs.js b/Web/static/js/al_docs.js
index 553cfd90..98702b78 100644
--- a/Web/static/js/al_docs.js
+++ b/Web/static/js/al_docs.js
@@ -266,6 +266,9 @@ u(document).on("click", ".docListViewItem a.viewerOpener, a.docGalleryItem", asy
     if(e.target.closest('.doc_volume_action')) {
         return
     }
+    if(window.openvk.current_id == 0) {
+        return
+    }
 
     const target = u(e.target)
     const link   = target.closest('a')
diff --git a/Web/static/js/router.js b/Web/static/js/router.js
index 51ba1a48..2a3a6c6a 100644
--- a/Web/static/js/router.js
+++ b/Web/static/js/router.js
@@ -309,10 +309,6 @@ u(document).on('submit', 'form', async (e) => {
         return
     }
 
-    if((localStorage.getItem('ux.disable_ajax_routing') ?? 0) == 1 || window.openvk.current_id == 0) {
-        return false
-    }
-
     if(window.openvk.disable_ajax == 1) {
         return false
     }
@@ -322,6 +318,10 @@ u(document).on('submit', 'form', async (e) => {
         collect_attachments_node(target)
     }
 
+    if((localStorage.getItem('ux.disable_ajax_routing') ?? 0) == 1 || window.openvk.current_id == 0) {
+        return false
+    }
+
     u('#ajloader').addClass('shown')
 
     const form = e.target