From bc81b03d6a74be1491bc83d72732075aabe9192a Mon Sep 17 00:00:00 2001
From: XingfenD <xingfen.fendy@outlook.com>
Date: Mon, 7 Sep 2026 15:44:08 +0800
Subject: [PATCH] fix(web): hide scan trigger from members per admin-only write
 rule

---
 web/src/pages/Shelf.tsx | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/web/src/pages/Shelf.tsx b/web/src/pages/Shelf.tsx
index 69280cc..4f28fa7 100644
--- a/web/src/pages/Shelf.tsx
+++ b/web/src/pages/Shelf.tsx
@@ -60,6 +60,7 @@ function BookCard({
 export default function Shelf() {
   const qc = useQueryClient();
   const nav = useNavigate();
+  const { isAdmin } = useAuth();
   const [lib, setLib] = useState(0); // 0 = 全部库
   const [qRaw, setQRaw] = useState("");
   const [q, setQ] = useState("");
@@ -113,7 +114,7 @@ export default function Shelf() {
             <button className={btn} onClick={() => qc.invalidateQueries({ queryKey: ["books"] })}>
               刷新
             </button>
-            {lib > 0 && (
+            {isAdmin && lib > 0 && (
               <button className={btn} disabled={scan.isPending} onClick={() => scan.mutate(lib)}>
                 {scan.isPending ? "扫描中…" : "扫描此库"}
               </button>