From 1a4c53da2c65567695261e8c85f32c25a1903be3 Mon Sep 17 00:00:00 2001
From: Mouse Reeve <mousereeve@riseup.net>
Date: Sun, 31 Jan 2021 10:44:46 -0800
Subject: [PATCH] Only show delete button to appropriate users

---
 bookwyrm/templates/lists/list.html | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/bookwyrm/templates/lists/list.html b/bookwyrm/templates/lists/list.html
index 2260acb5..8f171bb4 100644
--- a/bookwyrm/templates/lists/list.html
+++ b/bookwyrm/templates/lists/list.html
@@ -47,11 +47,13 @@
                         <div class="card-footer-item">
                             <p>Added by {% include 'snippets/username.html' with user=item.added_by %}</p>
                         </div>
+                        {% if list.user == request.user or list.curation == 'open' and item.added_by == request.user %}
                         <form name="add-book" method="post" action="{% url 'list-add-book' list.id %}" class="card-footer-item">
                             {% csrf_token %}
                             <input type="hidden" name="book" value="{{ book.id }}">
                             <button type="submit" class="button is-small is-danger">Remove</button>
                         </form>
+                        {% endif %}
                     </div>
                 </div>
             </li>