add canEdit route

API/Controllers/TacticsController.cs

@@ -26,7 +26,7 @@ public class TacticController(ITacticService service, IContextAccessor accessor)
         [FromBody] UpdateNameRequest req)
     {
         var userId = accessor.CurrentUserId(HttpContext);
-        if (!await service.HasAnyRights(userId, tacticId))
+        if (!await service.IsOwnerOf(userId, tacticId))
         {
             return Unauthorized();
         }
@@ -41,7 +41,7 @@ public class TacticController(ITacticService service, IContextAccessor accessor)
     public async Task<IActionResult> GetTacticInfo(int tacticId)
     {
         var userId = accessor.CurrentUserId(HttpContext);
-        if (!await service.HasAnyRights(userId, tacticId))
+        if (!await service.IsOwnerOf(userId, tacticId))
         {
             return Unauthorized();
         }
@@ -57,7 +57,7 @@ public class TacticController(ITacticService service, IContextAccessor accessor)
     public async Task<IActionResult> GetTacticStepsRoot(int tacticId)
     {
         var userId = accessor.CurrentUserId(HttpContext);
-        if (!await service.HasAnyRights(userId, tacticId))
+        if (!await service.IsOwnerOf(userId, tacticId))
         {
             return Unauthorized();
         }
@@ -110,7 +110,7 @@ public class TacticController(ITacticService service, IContextAccessor accessor)
     {
         var userId = accessor.CurrentUserId(HttpContext);
 
-        if (!await service.HasAnyRights(userId, tacticId))
+        if (!await service.IsOwnerOf(userId, tacticId))
         {
             return Unauthorized();
         }
@@ -125,7 +125,7 @@ public class TacticController(ITacticService service, IContextAccessor accessor)
     {
         var userId = accessor.CurrentUserId(HttpContext);
 
-        if (!await service.HasAnyRights(userId, tacticId))
+        if (!await service.IsOwnerOf(userId, tacticId))
         {
             return Unauthorized();
         }
@@ -142,7 +142,7 @@ public class TacticController(ITacticService service, IContextAccessor accessor)
     public async Task<IActionResult> SaveStepContent(int tacticId, int stepId, [FromBody] SaveStepContentRequest req)
     { 
         var userId = accessor.CurrentUserId(HttpContext);
-        if (!await service.HasAnyRights(userId, tacticId))
+        if (!await service.IsOwnerOf(userId, tacticId))
         {
             return Unauthorized();
         }
@@ -151,4 +151,13 @@ public class TacticController(ITacticService service, IContextAccessor accessor)
         return found ? Ok() : NotFound();
     }
 
+    public record CanEditResponse(bool CanEdit);
+
+    [HttpGet("/tactics/{tacticId:int}/can-edit")]
+    [Authorize]
+    public async Task<CanEditResponse> CanEdit(int tacticId)
+    {
+        var userId = accessor.CurrentUserId(HttpContext);
+        return new CanEditResponse(await service.IsOwnerOf(userId, tacticId));
+    }
 }

DbServices/DbTacticService.cs

@@ -18,7 +18,7 @@ public class DbTacticService(AppContext.AppContext context) : ITacticService
         );
     }
 
-    public async Task<bool> HasAnyRights(int userId, int tacticId)
+    public async Task<bool> IsOwnerOf(int userId, int tacticId)
     {
         var tacticEntity = await context.Tactics.FirstOrDefaultAsync(u => u.Id == tacticId);
         if (tacticEntity == null)

Services/ITacticService.cs

@@ -15,12 +15,12 @@ public interface ITacticService
     Task<IEnumerable<Tactic>> ListTacticsOf(int userId);
 
     /// <summary>
-    /// Checks if the user has any rights to access the specified tactic.
+    /// Checks if the userId corresponds to the tactic's owner identifier
     /// </summary>
     /// <param name="userId">The ID of the user.</param>
     /// <param name="tacticId">The ID of the tactic.</param>
     /// <returns>A task that represents the asynchronous operation. The task result contains a boolean indicating whether the user has rights.</returns>
-    Task<bool> HasAnyRights(int userId, int tacticId);
+    Task<bool> IsOwnerOf(int userId, int tacticId);
 
     /// <summary>
     /// Adds a new tactic for the specified user.