2 files changed, 12 insertions, 7 deletions
diff --git a/apps/web/app/dashboard/lists/[listId]/page.tsx b/apps/web/app/dashboard/lists/[listId]/page.tsx
index 3f9c3416..2b2cc9bb 100644
--- a/apps/web/app/dashboard/lists/[listId]/page.tsx
+++ b/apps/web/app/dashboard/lists/[listId]/page.tsx
@@ -50,6 +50,9 @@ export default async function ListPage(props: {
       ? searchParams.includeArchived === "true"
       : userSettings.archiveDisplayBehaviour === "show";
 
+  // Only show editor card if user is owner or editor (not viewer)
+  const canEdit = list.userRole === "owner" || list.userRole === "editor";
+
   return (
     <BookmarkListContextProvider list={list}>
       <Bookmarks
@@ -58,7 +61,7 @@ export default async function ListPage(props: {
           archived: !includeArchived ? false : undefined,
         }}
         showDivider={true}
-        showEditorCard={list.type === "manual"}
+        showEditorCard={list.type === "manual" && canEdit}
         header={<ListHeader initialData={list} />}
       />
     </BookmarkListContextProvider>
diff --git a/apps/web/app/reader/[bookmarkId]/page.tsx b/apps/web/app/reader/[bookmarkId]/page.tsx
index 7c2b0c9e..e32811a9 100644
--- a/apps/web/app/reader/[bookmarkId]/page.tsx
+++ b/apps/web/app/reader/[bookmarkId]/page.tsx
@@ -1,7 +1,7 @@
 "use client";
 
 import { Suspense, useState } from "react";
-import { useRouter } from "next/navigation";
+import { useParams, useRouter } from "next/navigation";
 import HighlightCard from "@/components/dashboard/highlights/HighlightCard";
 import ReaderView from "@/components/dashboard/preview/ReaderView";
 import { Button } from "@/components/ui/button";
@@ -29,16 +29,14 @@ import {
   Type,
   X,
 } from "lucide-react";
+import { useSession } from "next-auth/react";
 
 import { api } from "@karakeep/shared-react/trpc";
 import { BookmarkTypes } from "@karakeep/shared/types/bookmarks";
 import { getBookmarkTitle } from "@karakeep/shared/utils/bookmarkUtils";
 
-export default function ReaderViewPage({
-  params,
-}: {
-  params: { bookmarkId: string };
-}) {
+export default function ReaderViewPage() {
+  const params = useParams<{ bookmarkId: string }>();
   const bookmarkId = params.bookmarkId;
   const { data: highlights } = api.highlights.getForBookmark.useQuery({
     bookmarkId,
@@ -47,12 +45,14 @@ export default function ReaderViewPage({
     bookmarkId,
   });
 
+  const { data: session } = useSession();
   const router = useRouter();
   const [fontSize, setFontSize] = useState([18]);
   const [lineHeight, setLineHeight] = useState([1.6]);
   const [fontFamily, setFontFamily] = useState("serif");
   const [showHighlights, setShowHighlights] = useState(false);
   const [showSettings, setShowSettings] = useState(false);
+  const isOwner = session?.user?.id === bookmark?.userId;
 
   const fontFamilies = {
     serif: "ui-serif, Georgia, Cambria, serif",
@@ -245,6 +245,7 @@ export default function ReaderViewPage({
                         lineHeight: lineHeight[0],
                       }}
                       bookmarkId={bookmarkId}
+                      readOnly={!isOwner}
                     />
                   </div>
                 </Suspense>
@@ -299,6 +300,7 @@ export default function ReaderViewPage({
                       key={highlight.id}
                       highlight={highlight}
                       clickable={true}
+                      readOnly={!isOwner}
                     />
                   ))}
                 </div>