From 10c2c4bbc7a58ddd2d64ca9cb0f63402d0939e61 Mon Sep 17 00:00:00 2001
From: Jonathan Miller <jmiller-moko@noreply.git.mokoconsulting.tech>
Date: Tue, 23 Jun 2026 11:45:47 -0500
Subject: [PATCH] style(cpanel): remove dashboard button, shield links based on
 ACL

Shield icon links to dashboard only if user has core.manage permission
on com_mokosuiteclient. Otherwise renders as static icon.
---
 .../mod_mokosuiteclient_cpanel/tmpl/default.php      | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/source/packages/mod_mokosuiteclient_cpanel/tmpl/default.php b/source/packages/mod_mokosuiteclient_cpanel/tmpl/default.php
index 7bf17a10..29412f9e 100644
--- a/source/packages/mod_mokosuiteclient_cpanel/tmpl/default.php
+++ b/source/packages/mod_mokosuiteclient_cpanel/tmpl/default.php
@@ -8,6 +8,7 @@
 
 defined('_JEXEC') or die;
 
+use Joomla\CMS\Factory;
 use Joomla\CMS\Language\Text;
 use Joomla\CMS\Router\Route;
 use Joomla\CMS\Session\Session;
@@ -61,7 +62,12 @@ $diskColor = ($diskPct !== null && $diskPct > 90) ? 'bg-danger' : (($diskPct !==
 
 <div class="mod-mokosuiteclient-cpanel card p-3 mb-4">
 	<div class="d-flex flex-wrap align-items-center gap-2" style="font-size:0.85rem;">
-		<a href="<?php echo Route::_('index.php?option=com_mokosuiteclient'); ?>" style="color:#1a2744;text-decoration:none;" title="MokoSuite Dashboard"><span class="icon-shield-alt" aria-hidden="true" style="font-size:1.1rem"></span></a>
+		<?php $canDashboard = Factory::getApplication()->getIdentity()->authorise('core.manage', 'com_mokosuiteclient'); ?>
+		<?php if ($canDashboard): ?>
+			<a href="<?php echo Route::_('index.php?option=com_mokosuiteclient'); ?>" style="color:#1a2744;text-decoration:none;" title="MokoSuite Dashboard"><span class="icon-shield-alt" aria-hidden="true" style="font-size:1.1rem"></span></a>
+		<?php else: ?>
+			<span class="icon-shield-alt" aria-hidden="true" style="font-size:1.1rem;color:#1a2744"></span>
+		<?php endif; ?>
 		<span class="fw-bold"><?php echo htmlspecialchars($siteInfo->sitename ?? ''); ?></span>
 		<span class="badge bg-primary">MokoSuite <?php echo htmlspecialchars($siteInfo->mokosuiteclient_version ?? ''); ?></span>
 		<?php if (!empty($supportPin)): ?>
@@ -79,10 +85,6 @@ $diskColor = ($diskPct !== null && $diskPct > 90) ? 'bg-danger' : (($diskPct !==
 		<span class="ms-auto d-flex align-items-center gap-2">
 			<span class="icon-globe" aria-hidden="true"></span>
 			<code><?php echo htmlspecialchars($currentIp); ?></code>
-			<a href="<?php echo Route::_('index.php?option=com_mokosuiteclient'); ?>" class="btn btn-sm btn-primary">
-				<span class="icon-cogs" aria-hidden="true"></span>
-				<?php echo Text::_('MOD_MOKOSUITECLIENT_CPANEL_OPEN_DASHBOARD'); ?>
-			</a>
 		</span>
 	</div>
 </div>