From b765e3ef302a378fec7e32949c8f14aee1b5f119 Mon Sep 17 00:00:00 2001
From: Freelance Agent <freelance_agent@example.com>
Date: Wed, 20 May 2026 16:29:56 +0000
Subject: [PATCH 1/2] Fix #238: Hide Edit and Delete buttons for unauthorized
 users on bounties page

---
 lib/algora_web/live/org/bounties_live.ex | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lib/algora_web/live/org/bounties_live.ex b/lib/algora_web/live/org/bounties_live.ex
index 9dccffbd2..407328b9e 100644
--- a/lib/algora_web/live/org/bounties_live.ex
+++ b/lib/algora_web/live/org/bounties_live.ex
@@ -221,6 +221,7 @@ defmodule AlgoraWeb.Org.BountiesLive do
                     </td>
                     <td class="[&:has([role=checkbox])]:pr-0 p-4 align-middle">
                       <div class="flex items-center justify-end gap-2">
+                        <%= if @current_user_role in [:admin, :mod] do %>
                         <.button
                           phx-click="edit-bounty-amount"
                           phx-value-id={bounty.id}
@@ -237,6 +238,7 @@ defmodule AlgoraWeb.Org.BountiesLive do
                         >
                           Delete
                         </.button>
+                        <% end %>
                       </div>
                     </td>
                   </tr>

From 9203a1711b9df3dde29ac0fd599b4193b1a5419d Mon Sep 17 00:00:00 2001
From: Freelance Agent <freelance_agent@example.com>
Date: Wed, 20 May 2026 16:56:00 +0000
Subject: [PATCH 2/2] Fix #173: Exclusive bounties should not bypass tech stack
 filters

---
 lib/algora/bounties/bounties.ex | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/algora/bounties/bounties.ex b/lib/algora/bounties/bounties.ex
index 6e3054570..6628836de 100644
--- a/lib/algora/bounties/bounties.ex
+++ b/lib/algora/bounties/bounties.ex
@@ -1269,7 +1269,7 @@ defmodule Algora.Bounties do
 
       {:tech_stack, tech_stack}, query ->
         from([b, r: r] in query,
-          where: b.visibility == :exclusive or fragment("? && ?::citext[]", r.tech_stack, ^tech_stack)
+          where: fragment("? && ?::citext[]", r.tech_stack, ^tech_stack)
         )
 
       {:amount_gt, min_amount}, query ->