lato_cms 3.0.5 → 3.0.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 880a42ede332f95018d49081a9d2dc3ac0b510c62e4a218ebf71561eec3c9408
-  data.tar.gz: 9e7f487b6323f950e3d68bf80acc3bb9770962e72c1f64fc6394ab0adf66e368
+  metadata.gz: 73f72c7845f56b80f62423a1709a3ea8d5bd80813d8c61b4eaf6af2b353d660c
+  data.tar.gz: f222800a0be54f4e7022ecebfe6259515e56fd82554d1784d7bf55fa1a65074e
 SHA512:
-  metadata.gz: 198521b168caa3bfb06b67cb466335da752144c8d33ad8d7850d70b36c4b598864387d1cff4bc9fb0f389fbed304093f49446a944d6e483917abfe98bc59d825
-  data.tar.gz: 657818b8115590944db38ea1ba4141dd2f720455ed4621a7ff4ad046ac753d0bdf16c01c1a39df79cf251f28c81b515f1316c31dbf0f92c4166725b6fc12fb75
+  metadata.gz: 59fa3bb5a49ce31a770192a6708c59f95313d44896bb493bf0d009b523f950d8f3165609b38da4dbfa4c239c9e6f7d44f2f8bcd870c7d01c4a3b147d11877c7b
+  data.tar.gz: 2d31910d84e7df094b4c85ae3f790bcd8e47e2c66dd7cfd472f9c2fde5016b85b1fbb9de1c7a12a86e8946ea527ab0fe8d8434d6e3ab1e5683df9d1fb402731d

data/app/controllers/lato_cms/application_controller.rb

@@ -4,9 +4,11 @@ module LatoCms
     layout 'lato/application'
     before_action :authenticate_session
     before_action :authenticate_group
-    before_action :authenticate_lato_cms_admin
+    before_action :authenticate_lato_cms_access
     before_action { active_sidebar(:lato_cms); active_navbar(:lato_cms) }
 
+    helper_method :lato_cms_admin?
+
     def index
       redirect_to lato_cms.pages_path
     end
@@ -17,10 +19,23 @@ module LatoCms
       @query_pages ||= LatoCms::Page.for_lato_spaces_group(@session.get(:spaces_group_id))
     end
 
-    def authenticate_lato_cms_admin
-      return true if @session.user&.lato_cms_admin
+    # Section-level guard: any CMS role (operator or admin) may enter.
+    def authenticate_lato_cms_access
+      return true if @session.user&.lato_cms_access?
 
       redirect_to lato.root_path, alert: t('lato_cms.unauthorized_section')
     end
+
+    # Action-level guard for page management and translation links: admin only.
+    def authenticate_lato_cms_admin
+      return true if lato_cms_admin?
+
+      redirect_to lato_cms.pages_path, alert: t('lato_cms.unauthorized_action')
+    end
+
+    # Exposed to views to conditionally render admin-only controls.
+    def lato_cms_admin?
+      @session.user&.lato_cms_admin? || false
+    end
   end
 end

data/app/controllers/lato_cms/pages_controller.rb

@@ -1,6 +1,16 @@
 module LatoCms
   class PagesController < ApplicationController
+    # Page management and translation links are reserved to the admin role.
+    # Operators keep read access plus field editing and component toggles.
+    ADMIN_ONLY_ACTIONS = %i[
+      create create_action
+      update update_action
+      destroy_action
+      translations link_translation_action unlink_translation_action
+    ].freeze
+
     before_action { active_sidebar(:lato_cms_pages) }
+    before_action :authenticate_lato_cms_admin, only: ADMIN_ONLY_ACTIONS
 
     def index
       pages = query_pages
@@ -125,6 +135,56 @@ module LatoCms
       end
     end
 
+    def clone_component_action
+      @page = query_pages.find(params[:id])
+      source = @page.translations.find_by(id: params[:source_page_id])
+      template_component_id = params[:template_component_id].to_s
+
+      respond_to do |format|
+        if source && clone_component_fields(source, @page, template_component_id)
+          format.html { redirect_to lato_cms.pages_show_path(@page), notice: t('lato_cms.component_cloned') }
+          format.json { render json: { message: t('lato_cms.component_cloned') } }
+        else
+          format.html { redirect_to lato_cms.pages_show_path(@page), alert: t('lato_cms.component_clone_failed') }
+          format.json { render json: { error: t('lato_cms.component_clone_failed') }, status: :unprocessable_entity }
+        end
+      end
+    end
+
+    def translations
+      @page = query_pages.find(params[:id])
+    end
+
+    def link_translation_action
+      @page = query_pages.find(params[:id])
+      other_page = query_pages.find(params[:translation_page_id])
+
+      respond_to do |format|
+        if @page.link_translation(other_page)
+          format.html { redirect_to lato_cms.pages_translations_path(@page), notice: t('lato_cms.translation_linked') }
+          format.json { render json: @page }
+        else
+          format.html { redirect_to lato_cms.pages_translations_path(@page), alert: t('lato_cms.translation_link_failed') }
+          format.json { render json: { error: t('lato_cms.translation_link_failed') }, status: :unprocessable_entity }
+        end
+      end
+    end
+
+    def unlink_translation_action
+      @page = query_pages.find(params[:id])
+      other_page = query_pages.find(params[:translation_page_id])
+
+      respond_to do |format|
+        if @page.unlink_translation(other_page)
+          format.html { redirect_to lato_cms.pages_translations_path(@page), notice: t('lato_cms.translation_unlinked') }
+          format.json { render json: @page }
+        else
+          format.html { redirect_to lato_cms.pages_translations_path(@page), alert: t('lato_cms.translation_unlink_failed') }
+          format.json { render json: { error: t('lato_cms.translation_unlink_failed') }, status: :unprocessable_entity }
+        end
+      end
+    end
+
     def destroy_action
       @page = query_pages.find(params[:id])
 
@@ -141,6 +201,33 @@ module LatoCms
 
     private
 
+    # Replaces the target page's fields for a component with copies of the source
+    # page's fields for the same component. Attachments share the source blobs.
+    def clone_component_fields(source, target, template_component_id)
+      # Components are template-specific: only clone between pages using the same template.
+      return false unless source.template_id == target.template_id
+
+      source_fields = source.fields.select { |f| f.template_component_id == template_component_id }
+      return false if source_fields.empty?
+
+      target.transaction do
+        target.fields.where(template_component_id: template_component_id).destroy_all
+
+        source_fields.each do |src|
+          field = target.fields.create!(
+            template_id: target.template_id,
+            template_component_id: src.template_component_id,
+            component_id: src.component_id,
+            field_id: src.field_id,
+            value: src.value
+          )
+          src.files.each { |file| field.files.attach(file.blob) }
+        end
+      end
+
+      true
+    end
+
     def save_repeater_fields(template_component, component, repeater_items, repeater_order, errors)
       template_component_id = template_component[:template_component_id]
       component_id = template_component[:component_id]

data/app/helpers/lato_cms/pages_helper.rb

@@ -10,6 +10,7 @@ module LatoCms
       '#'
     end
 
+    # Index locale cell (also the `locale` column viewer). Static badge.
     def lato_cms_page_locale(page)
       content_tag(:span, class: 'badge bg-secondary') do
         concat locale_to_flag(page.locale)
@@ -17,6 +18,7 @@ module LatoCms
       end
     end
 
+    # Index actions cell (also the `actions` column viewer). Inline buttons.
     def lato_cms_page_actions(page, show_edit: false, show_delete: false, hide_show: false)
       btn_group = capture do
         content_tag(:div, class: 'btn-group btn-group-sm') do
@@ -42,6 +44,63 @@ module LatoCms
       end
     end
 
+    # Show-page locale: dropdown to jump to the same page in another language.
+    def lato_cms_page_locale_dropdown(page)
+      siblings = page.translations.order(:locale).to_a
+      badge = capture do
+        concat locale_to_flag(page.locale)
+        concat " #{page.locale.upcase}"
+      end
+
+      return content_tag(:span, badge, class: 'badge bg-secondary') if siblings.empty?
+
+      content_tag(:div, class: 'dropdown') do
+        concat button_tag(badge, type: 'button', class: 'btn btn-sm btn-secondary dropdown-toggle', data: { bs_toggle: 'dropdown' })
+        concat(content_tag(:ul, class: 'dropdown-menu') do
+          siblings.each do |sibling|
+            concat(content_tag(:li) do
+              link_to lato_cms.pages_show_path(sibling), class: 'dropdown-item' do
+                concat locale_to_flag(sibling.locale)
+                concat " #{sibling.locale.upcase} — #{sibling.title}"
+              end
+            end)
+          end
+        end)
+      end
+    end
+
+    # Show-page actions: single dropdown (view frontend, show, edit settings,
+    # translations, delete).
+    def lato_cms_page_actions_dropdown(page, show_edit: false, show_translations: false, show_delete: false, hide_show: false)
+      content_tag(:div, class: 'dropdown', title: t('lato_cms.cta_actions'), data: { controller: 'lato-tooltip' }) do
+        concat button_tag(tag.i(class: 'bi bi-three-dots-vertical'), type: 'button',
+          class: 'btn btn-sm btn-outline-primary', data: { bs_toggle: 'dropdown' })
+        concat(content_tag(:ul, class: 'dropdown-menu dropdown-menu-end') do
+          if page.frontend_url.present?
+            concat content_tag(:li, link_to(t('lato_cms.action_view_frontend'), page.frontend_url, class: 'dropdown-item', target: '_blank'))
+          else
+            concat content_tag(:li, content_tag(:span, t('lato_cms.action_view_frontend'), class: 'dropdown-item disabled text-muted'))
+          end
+          unless hide_show
+            concat content_tag(:li, link_to(t('lato_cms.cta_show'), lato_cms.pages_show_path(page), class: 'dropdown-item'))
+          end
+          if show_edit
+            concat content_tag(:li, link_to(t('lato_cms.cta_edit'), lato_cms.pages_update_path(page), class: 'dropdown-item',
+              data: { lato_action_target: 'trigger', turbo_frame: dom_id(page, 'form'), action_title: t('lato_cms.page_update_title') }))
+          end
+          if show_translations
+            concat content_tag(:li, link_to(t('lato_cms.translations_title'), lato_cms.pages_translations_path(page), class: 'dropdown-item',
+              data: { lato_action_target: 'trigger', turbo_frame: dom_id(page, 'translations'), action_title: t('lato_cms.translations_title') }))
+          end
+          if show_delete
+            concat content_tag(:li, tag.hr(class: 'dropdown-divider'))
+            concat content_tag(:li, link_to(t('lato_cms.cta_delete'), lato_cms.pages_destroy_action_path(page), class: 'dropdown-item text-danger',
+              data: { turbo_method: 'DELETE', turbo_confirm: t('lato_cms.cta_delete_confirm') }))
+          end
+        end)
+      end
+    end
+
     def lato_cms_render_field(field_id:, field_config:, page_field:, input_name_prefix: nil, dom_id_prefix: nil)
       render resolve_lato_cms_field_partial(field_config),
         field_id: field_id,

data/app/models/lato_cms/page.rb

@@ -10,11 +10,73 @@ module LatoCms
     validates :locale, presence: true, inclusion: { in: ->(page) { LatoCms.config.locales.map(&:to_s) } }
     validates :permalink, presence: true, format: { with: /\A\/([a-zA-Z0-9\-_]+(\/[a-zA-Z0-9\-_]+)*)?\z/, message: 'must start with / and contain only letters, numbers, hyphens, and underscores' }
     validate :permalink_unique_within_lato_spaces_group
+    validate :locale_unique_within_translation_group
 
     before_validation :generate_permalink, on: :create
 
     has_many :fields, class_name: 'LatoCms::PageField', dependent: :destroy
 
+    # ── Translations ────────────────────────────────────────────────────────
+    # Pages sharing the same translation_group_id (within the same spaces group)
+    # are translations of each other, at most one per locale.
+
+    # Sibling pages linked as translations of this page.
+    def translations
+      return LatoCms::Page.none if translation_group_id.blank?
+
+      LatoCms::Page
+        .for_lato_spaces_group(lato_spaces_group_id)
+        .where(translation_group_id: translation_group_id)
+        .where.not(id: id)
+    end
+
+    # The linked translation for a given locale, if any.
+    def translation_for(locale)
+      translations.find_by(locale: locale.to_s)
+    end
+
+    # Pages of a given locale that can be linked to this page: same spaces group,
+    # not this page, and not already part of any translation group.
+    def translation_candidates(locale)
+      LatoCms::Page
+        .for_lato_spaces_group(lato_spaces_group_id)
+        .where(locale: locale.to_s, translation_group_id: nil)
+        .where.not(id: id)
+    end
+
+    # Links another page as a translation of this one, merging any existing
+    # groups so all members share a single translation_group_id.
+    def link_translation(other_page)
+      return false unless other_page && other_page.id != id
+      return false unless other_page.lato_spaces_group_id == lato_spaces_group_id
+
+      group_id = translation_group_id.presence || other_page.translation_group_id.presence || SecureRandom.uuid
+      old_group_id = other_page.translation_group_id.presence
+
+      transaction do
+        update!(translation_group_id: group_id)
+        # Re-point every member of the other page's former group to keep groups merged.
+        if old_group_id && old_group_id != group_id
+          LatoCms::Page
+            .for_lato_spaces_group(lato_spaces_group_id)
+            .where(translation_group_id: old_group_id)
+            .update_all(translation_group_id: group_id)
+        else
+          other_page.update!(translation_group_id: group_id)
+        end
+      end
+
+      true
+    end
+
+    # Removes a page from this page's translation group.
+    def unlink_translation(other_page)
+      return false unless other_page && other_page.translation_group_id == translation_group_id
+
+      other_page.update!(translation_group_id: nil)
+      true
+    end
+
     def template
       LatoCms::TemplateManager.find_template(template_id)
     end
@@ -64,6 +126,7 @@ module LatoCms
         template_id: template_id,
         template_name: template_name,
         frontend_url: frontend_url,
+        translations: translations_json,
         created_at: created_at,
         updated_at: updated_at
       }
@@ -78,6 +141,13 @@ module LatoCms
 
     private
 
+    # Map of locale => permalink/id for linked translations, for API consumers.
+    def translations_json
+      translations.each_with_object({}) do |page, hash|
+        hash[page.locale] = { id: page.id, permalink: page.permalink, frontend_url: page.frontend_url }
+      end
+    end
+
     def build_fields_json(comps)
       fields_by_component = fields.group_by(&:template_component_id)
 
@@ -160,5 +230,17 @@ module LatoCms
         errors.add(:permalink, :taken)
       end
     end
+
+    def locale_unique_within_translation_group
+      return if translation_group_id.blank?
+
+      conflict = LatoCms::Page
+        .for_lato_spaces_group(lato_spaces_group_id)
+        .where(translation_group_id: translation_group_id, locale: locale)
+        .where.not(id: id)
+        .exists?
+
+      errors.add(:locale, :taken) if conflict
+    end
   end
 end

data/app/views/lato_cms/pages/_component_accordion.html.erb

@@ -2,6 +2,9 @@
 <% component_fields = page.fields.select { |f| f.template_component_id == tc[:template_component_id] } %>
 <% required_component = tc[:required] == true %>
 <% enabled_component = page.component_effectively_enabled?(tc[:template_component_id]) %>
+<%# Clonable translations: linked pages using the same template (components differ
+    across templates, so cross-template clone is not allowed). %>
+<% clonable_translations = tc[:component] ? translations.select { |s| s.template_id == page.template_id } : [] %>
 
 <div class="accordion-item">
   <h2 class="accordion-header" id="heading-<%= accordion_id %>">
@@ -23,25 +26,50 @@
              data-lato-cms-component-toggle-saving-label-value="<%= t('lato_cms.component_state_saving') %>"
              data-lato-cms-component-toggle-saved-label-value="<%= t('lato_cms.component_state_saved') %>"
              data-lato-cms-component-toggle-error-label-value="<%= t('lato_cms.component_state_save_error') %>">
+      <% end %>
 
-        <%= form_with url: lato_cms.pages_toggle_component_action_path(page, tc[:template_component_id]), method: :patch,
-            data: { turbo: false, action: 'submit->lato-cms-component-toggle#toggle' } do %>
-        <div class="d-flex justify-content-between align-items-center mb-3 pb-2 border-bottom">
-          <div class="d-flex align-items-center gap-2 small fw-medium <%= enabled_component ? 'text-success' : 'text-muted' %>" data-lato-cms-component-toggle-target="stateWrapper">
-            <i class="<%= enabled_component ? 'bi bi-eye' : 'bi bi-eye-slash' %>" data-lato-cms-component-toggle-target="stateIcon"></i>
-            <span data-lato-cms-component-toggle-target="stateLabel"><%= enabled_component ? t('lato_cms.component_active_label') : t('lato_cms.component_inactive_label') %></span>
+        <%# Component settings header: enable/disable toggle (left) and clone (right). %>
+        <% if !required_component || clonable_translations.any? %>
+        <div class="d-flex justify-content-between align-items-center gap-2 mb-3 pb-2 border-bottom">
+          <div class="d-flex align-items-center gap-3">
+            <% unless required_component %>
+              <%= form_with url: lato_cms.pages_toggle_component_action_path(page, tc[:template_component_id]), method: :patch,
+                  data: { turbo: false, action: 'submit->lato-cms-component-toggle#toggle' } do %>
+                <div class="d-flex align-items-center gap-3">
+                  <div class="form-check form-switch m-0">
+                    <%= hidden_field_tag :enabled, '0' %>
+                    <%= check_box_tag :enabled, '1', enabled_component, class: 'form-check-input', id: "toggle-#{accordion_id}", onchange: 'this.form.requestSubmit()', 'aria-label': t('lato_cms.component_enabled_label'), data: { lato_cms_component_toggle_target: 'checkbox' } %>
+                  </div>
+                  <div class="d-flex align-items-center gap-2 small fw-medium <%= enabled_component ? 'text-success' : 'text-muted' %>" data-lato-cms-component-toggle-target="stateWrapper">
+                    <i class="<%= enabled_component ? 'bi bi-eye' : 'bi bi-eye-slash' %>" data-lato-cms-component-toggle-target="stateIcon"></i>
+                    <span data-lato-cms-component-toggle-target="stateLabel"><%= enabled_component ? t('lato_cms.component_active_label') : t('lato_cms.component_inactive_label') %></span>
+                  </div>
+                  <span data-lato-cms-component-toggle-target="status"></span>
+                </div>
+              <% end %>
+            <% end %>
           </div>
-          <div class="d-flex align-items-center gap-2">
-            <span data-lato-cms-component-toggle-target="status"></span>
-            <div class="form-check form-switch m-0">
-            <%= hidden_field_tag :enabled, '0' %>
-            <%= check_box_tag :enabled, '1', enabled_component, class: 'form-check-input', id: "toggle-#{accordion_id}", onchange: 'this.form.requestSubmit()', data: { lato_cms_component_toggle_target: 'checkbox' } %>
-            <%= label_tag "toggle-#{accordion_id}", t('lato_cms.component_enabled_label'), class: 'form-check-label ms-1 small' %>
+
+          <% if clonable_translations.any? %>
+            <div class="dropdown flex-shrink-0" data-controller="lato-tooltip" title="<%= t('lato_cms.component_clone_cta') %>">
+              <button class="btn btn-sm btn-outline-primary" type="button" data-bs-toggle="dropdown" aria-expanded="false">
+                <i class="bi bi-files"></i>
+              </button>
+              <ul class="dropdown-menu dropdown-menu-end">
+                <% clonable_translations.each do |sibling| %>
+                  <li>
+                    <%= button_to lato_cms.pages_clone_component_action_path(page, tc[:template_component_id]),
+                        params: { source_page_id: sibling.id }, method: :post, class: 'dropdown-item',
+                        form: { data: { turbo_confirm: t('lato_cms.component_clone_confirm', lang: sibling.locale.upcase) } } do %>
+                      <%= locale_to_flag(sibling.locale) %> <%= t('lato_cms.component_clone_from', lang: sibling.locale.upcase) %>
+                    <% end %>
+                  </li>
+                <% end %>
+              </ul>
             </div>
-          </div>
+          <% end %>
         </div>
         <% end %>
-      <% end %>
 
       <% if tc[:component] %>
         <% if required_component %>

data/app/views/lato_cms/pages/_fields_editor.html.erb

@@ -1,5 +1,6 @@
 <% page ||= @page %>
 <% template_components ||= @template_components %>
+<% translations = page.translations.order(:locale).to_a %>
 
 <div class="accordion" id="components-accordion" data-controller="lato-cms-component-accordion">
   <% template_components.each_with_index do |tc, index| %>
@@ -7,6 +8,7 @@
         page: page,
         tc: tc,
         index: index,
-        expanded: index == 0 %>
+        expanded: index == 0,
+        translations: translations %>
   <% end %>
 </div>

data/app/views/lato_cms/pages/_translations.html.erb

@@ -0,0 +1,41 @@
+<%= turbo_frame_tag dom_id(page, 'translations') do %>
+  <%= lato_form_notices class: %w[mb-3] %>
+
+  <% other_locales = LatoCms.config.locales.map(&:to_s) - [page.locale.to_s] %>
+  <% if other_locales.empty? %>
+    <p class="text-muted mb-0"><%= t('lato_cms.translation_no_other_locales') %></p>
+  <% else %>
+    <% other_locales.each do |locale| %>
+      <div class="d-flex align-items-center justify-content-between gap-2 mb-2">
+        <span class="badge bg-secondary">
+          <%= locale_to_flag(locale) %> <%= locale.upcase %>
+        </span>
+
+        <% sibling = page.translation_for(locale) %>
+        <% if sibling %>
+          <%# Linked translation: show it with an unlink button. %>
+          <div class="d-flex align-items-center gap-2 flex-grow-1 justify-content-end">
+            <%= link_to sibling.title, lato_cms.pages_show_path(sibling), class: 'text-truncate' %>
+            <%= button_to t('lato_cms.translation_unlink_cta'), lato_cms.pages_unlink_translation_action_path(page),
+              method: :delete, params: { translation_page_id: sibling.id },
+              class: 'btn btn-sm btn-outline-danger', form: { data: { turbo_confirm: t('lato_cms.translation_unlink_confirm') } } %>
+          </div>
+        <% else %>
+          <%# No translation for this locale: let the user link an existing page. %>
+          <% candidates = page.translation_candidates(locale) %>
+          <% if candidates.any? %>
+            <%= form_with url: lato_cms.pages_link_translation_action_path(page), method: :post,
+              class: 'd-flex align-items-center gap-2 flex-grow-1 justify-content-end' do %>
+              <%= select_tag :translation_page_id,
+                options_from_collection_for_select(candidates, :id, :title),
+                class: 'form-select form-select-sm', style: 'max-width: 260px;' %>
+              <%= submit_tag t('lato_cms.translation_link_cta'), class: 'btn btn-sm btn-outline-primary' %>
+            <% end %>
+          <% else %>
+            <span class="text-muted small"><%= t('lato_cms.translation_no_candidates') %></span>
+          <% end %>
+        <% end %>
+      </div>
+    <% end %>
+  <% end %>
+<% end %>

data/app/views/lato_cms/pages/index.html.erb

@@ -13,7 +13,7 @@
   </div>
   <div class="card-body">
     <%= lato_index @pages,
-      custom_actions: {
+      custom_actions: lato_cms_admin? ? {
         create: {
           path: lato_cms.pages_create_path,
           icon: 'bi bi-plus',
@@ -25,7 +25,7 @@
             action_title: t('lato_cms.page_create_title')
           }
         }
-      },
+      } : {},
       pagination_options: [10, 20, 50, 100]
     %>
   </div>

data/app/views/lato_cms/pages/show.html.erb

@@ -20,8 +20,10 @@
             <i class="bi bi-globe fs-1 mb-3"></i>
             <p class="mb-1"><%= t('lato_cms.show_no_preview_title') %></p>
             <p class="small"><%= t('lato_cms.show_no_preview_description').html_safe %></p>
-            <%= link_to t('lato_cms.show_edit_settings_cta'), lato_cms.pages_update_path(@page), class: 'btn btn-sm btn-outline-primary mt-2',
-              data: { lato_action_target: 'trigger', turbo_frame: dom_id(@page, 'form'), action_title: t('lato_cms.page_update_title') } %>
+            <% if lato_cms_admin? %>
+              <%= link_to t('lato_cms.show_edit_settings_cta'), lato_cms.pages_update_path(@page), class: 'btn btn-sm btn-outline-primary mt-2',
+                data: { lato_action_target: 'trigger', turbo_frame: dom_id(@page, 'form'), action_title: t('lato_cms.page_update_title') } %>
+            <% end %>
           </div>
         </div>
       <% end %>
@@ -33,24 +35,24 @@
         <div class="card-header d-flex justify-content-between align-items-center">
           <h2 class="fs-5 mb-0"><%= t('lato_cms.show_editor_title') %></h2>
           <div class="d-flex align-items-center gap-2">
-            <%= lato_cms_page_locale(@page) %>
+            <%= lato_cms_page_locale_dropdown(@page) %>
             <span class="vr"></span>
-            <%= lato_cms_page_actions(@page, show_edit: true, show_delete: true, hide_show: true) %>
+            <%= lato_cms_page_actions_dropdown(@page, show_edit: lato_cms_admin?, show_translations: lato_cms_admin?, show_delete: lato_cms_admin?, hide_show: true) %>
             <span class="vr"></span>
-            <button class="btn btn-sm btn-outline-secondary"
-                    title="<%= t('lato_cms.show_advanced_editor_tooltip') %>"
-                    data-controller="lato-tooltip"
-                    data-action="click->lato-cms-advanced-editor#toggle"
-                    data-lato-cms-advanced-editor-target="toggleBtn">
-              <i class="bi bi-fullscreen"></i>
-            </button>
-            <button class="btn btn-sm btn-outline-secondary d-none"
+            <button class="btn btn-sm btn-outline-primary d-none"
                     title="<%= t('lato_cms.show_hide_panel_tooltip') %>"
                     data-controller="lato-tooltip"
                     data-action="click->lato-cms-advanced-editor#toggleSidebar"
                     data-lato-cms-advanced-editor-target="collapseBtn">
               <i class="bi bi-layout-sidebar-reverse"></i>
             </button>
+            <button class="btn btn-sm btn-outline-primary"
+                    title="<%= t('lato_cms.show_advanced_editor_tooltip') %>"
+                    data-controller="lato-tooltip"
+                    data-action="click->lato-cms-advanced-editor#toggle"
+                    data-lato-cms-advanced-editor-target="toggleBtn">
+              <i class="bi bi-fullscreen"></i>
+            </button>
           </div>
         </div>
         <div class="card-body" style="overflow-y: auto; max-height: calc(100dvh - 230px);">
@@ -59,15 +61,19 @@
               <i class="bi bi-file-earmark-code fs-1 mb-3 d-block"></i>
               <p class="mb-1"><%= t('lato_cms.show_no_template_title') %></p>
               <p class="small"><%= t('lato_cms.show_no_template_description') %></p>
-              <%= link_to t('lato_cms.show_edit_settings_cta'), lato_cms.pages_update_path(@page), class: 'btn btn-sm btn-outline-primary mt-2',
-                data: { lato_action_target: 'trigger', turbo_frame: dom_id(@page, 'form'), action_title: t('lato_cms.page_update_title') } %>
+              <% if lato_cms_admin? %>
+                <%= link_to t('lato_cms.show_edit_settings_cta'), lato_cms.pages_update_path(@page), class: 'btn btn-sm btn-outline-primary mt-2',
+                  data: { lato_action_target: 'trigger', turbo_frame: dom_id(@page, 'form'), action_title: t('lato_cms.page_update_title') } %>
+              <% end %>
             </div>
           <% elsif !@page.template_available? %>
             <div class="alert alert-warning">
               <i class="bi bi-exclamation-triangle me-1"></i>
               <%= t('lato_cms.show_template_unavailable', template_id: @page.template_id) %>
-              <%= link_to t('lato_cms.show_edit_settings_cta'), lato_cms.pages_update_path(@page), class: 'btn btn-sm btn-outline-warning ms-2',
-                data: { lato_action_target: 'trigger', turbo_frame: dom_id(@page, 'form'), action_title: t('lato_cms.page_update_title') } %>
+              <% if lato_cms_admin? %>
+                <%= link_to t('lato_cms.show_edit_settings_cta'), lato_cms.pages_update_path(@page), class: 'btn btn-sm btn-outline-warning ms-2',
+                  data: { lato_action_target: 'trigger', turbo_frame: dom_id(@page, 'form'), action_title: t('lato_cms.page_update_title') } %>
+              <% end %>
             </div>
             <% existing_fields = @page.fields.group_by(&:template_component_id) %>
             <% if existing_fields.any? %>

data/app/views/lato_cms/pages/translations.html.erb

@@ -0,0 +1,14 @@
+<%= lato_page_head t('lato_cms.translations_title'), [
+  { label: t('lato_cms.pages_index_title'), path: lato_cms.pages_path },
+  { label: @page.title, path: lato_cms.pages_show_path(@page) },
+  { label: t('lato_cms.translations_title') }
+] %>
+
+<div class="card mb-4">
+  <div class="card-header">
+    <h2 class="fs-4 mb-0"><%= t('lato_cms.translations_title') %></h2>
+  </div>
+  <div class="card-body">
+    <%= render 'lato_cms/pages/translations', page: @page %>
+  </div>
+</div>

data/config/locales/en.yml

@@ -1,5 +1,13 @@
 en:
+  activerecord:
+    attributes:
+      lato/user:
+        lato_cms_admin_role: Lato CMS role
   lato_cms:
+    admin_roles:
+      none: No access
+      operator: Operator
+      admin: Administrator
     cta_show: Show
     cta_edit: Edit
     cta_update: Update
@@ -11,6 +19,7 @@ en:
     fields_saved: Fields saved successfully
     page_deleted: Page deleted successfully
     unauthorized_section: You do not have access to this section.
+    unauthorized_action: You do not have permission to perform this action.
     page_delete_failed: Failed to delete page
     api_page_not_found: Page not found
     pages_index_title: Pages
@@ -23,6 +32,17 @@ en:
     form_no_template_option: "-- No template --"
     form_template_unavailable: "The template \"%{template_id}\" is no longer available. Please select a different template."
     action_view_frontend: View
+    cta_actions: Actions
+    translations_title: Translations
+    translation_no_other_locales: No other locales are configured.
+    translation_link_cta: Link
+    translation_unlink_cta: Unlink
+    translation_unlink_confirm: Are you sure you want to unlink this translation?
+    translation_no_candidates: No pages available for this language
+    translation_linked: Translation linked successfully
+    translation_unlinked: Translation unlinked successfully
+    translation_link_failed: Failed to link translation
+    translation_unlink_failed: Failed to unlink translation
     show_no_preview_title: No preview available
     show_no_preview_description: Set the <strong>Frontend URL</strong> to see the page preview.
     show_edit_settings_cta: Edit page settings
@@ -42,6 +62,11 @@ en:
     component_inactive_label: This component is not active
     component_disabled_alert: This component is disabled and will not be exposed by API.
     component_state_updated: Component state updated
+    component_clone_cta: Clone
+    component_clone_from: "Clone from %{lang}"
+    component_clone_confirm: "Replace this component's fields with the ones from the %{lang} page?"
+    component_cloned: Component cloned successfully
+    component_clone_failed: Failed to clone component
     component_state_saving: Updating...
     component_state_saved: State updated
     component_state_save_error: Failed to update state

data/config/locales/it.yml

@@ -1,5 +1,13 @@
 it:
+  activerecord:
+    attributes:
+      lato/user:
+        lato_cms_admin_role: Ruolo Lato CMS
   lato_cms:
+    admin_roles:
+      none: Nessun accesso
+      operator: Operatore
+      admin: Amministratore
     cta_show: Visualizza
     cta_edit: Modifica
     cta_update: Aggiorna
@@ -11,6 +19,7 @@ it:
     fields_saved: Campi salvati con successo
     page_deleted: Pagina eliminata con successo
     unauthorized_section: Non hai accesso a questa sezione.
+    unauthorized_action: Non hai i permessi per eseguire questa azione.
     page_delete_failed: Impossibile eliminare la pagina
     api_page_not_found: Pagina non trovata
     pages_index_title: Pagine
@@ -23,6 +32,17 @@ it:
     form_no_template_option: "-- Nessun template --"
     form_template_unavailable: "Il template \"%{template_id}\" non e piu disponibile. Seleziona un template diverso."
     action_view_frontend: Anteprima
+    cta_actions: Azioni
+    translations_title: Traduzioni
+    translation_no_other_locales: Nessuna altra lingua configurata.
+    translation_link_cta: Collega
+    translation_unlink_cta: Scollega
+    translation_unlink_confirm: Sei sicuro di voler scollegare questa traduzione?
+    translation_no_candidates: Nessuna pagina disponibile per questa lingua
+    translation_linked: Traduzione collegata con successo
+    translation_unlinked: Traduzione scollegata con successo
+    translation_link_failed: Impossibile collegare la traduzione
+    translation_unlink_failed: Impossibile scollegare la traduzione
     show_no_preview_title: Anteprima non disponibile
     show_no_preview_description: Imposta il <strong>URL Frontend</strong> per visualizzare l'anteprima della pagina.
     show_edit_settings_cta: Modifica impostazioni pagina
@@ -42,6 +62,11 @@ it:
     component_inactive_label: Questa componente non e attiva
     component_disabled_alert: Questa componente e disattivata e non verra esposta dalle API.
     component_state_updated: Stato componente aggiornato
+    component_clone_cta: Clona
+    component_clone_from: "Clona da %{lang}"
+    component_clone_confirm: "Sostituire i campi di questa componente con quelli della pagina in %{lang}?"
+    component_cloned: Componente clonata con successo
+    component_clone_failed: Impossibile clonare la componente
     component_state_saving: Aggiornamento in corso...
     component_state_saved: Stato aggiornato
     component_state_save_error: Errore durante aggiornamento stato

data/config/routes.rb

@@ -17,6 +17,10 @@ LatoCms::Engine.routes.draw do
     patch ':id/update', to: 'pages#update_action', as: :pages_update_action
     post ':id/fields', to: 'pages#save_fields_action', as: :pages_save_fields_action
     patch ':id/components/:template_component_id/toggle', to: 'pages#toggle_component_action', as: :pages_toggle_component_action
+    post ':id/components/:template_component_id/clone', to: 'pages#clone_component_action', as: :pages_clone_component_action
+    get ':id/translations', to: 'pages#translations', as: :pages_translations
+    post ':id/translations', to: 'pages#link_translation_action', as: :pages_link_translation_action
+    delete ':id/translations', to: 'pages#unlink_translation_action', as: :pages_unlink_translation_action
     delete ':id', to: 'pages#destroy_action', as: :pages_destroy_action
   end
 end

data/db/migrate/20260705000000_add_translation_group_id_to_lato_cms_pages.rb

@@ -0,0 +1,8 @@
+class AddTranslationGroupIdToLatoCmsPages < ActiveRecord::Migration[8.1]
+  def change
+    # Pages sharing the same translation_group_id are translations of each other
+    # (one page per locale within a group). Nil means the page is not linked.
+    add_column :lato_cms_pages, :translation_group_id, :string
+    add_index :lato_cms_pages, :translation_group_id
+  end
+end

data/db/migrate/20260712092241_change_lato_cms_admin_to_lato_cms_admin_role_on_lato_user.rb

@@ -0,0 +1,18 @@
+class ChangeLatoCmsAdminToLatoCmsAdminRoleOnLatoUser < ActiveRecord::Migration[8.1]
+  def up
+    add_column :lato_users, :lato_cms_admin_role, :integer, default: 0, null: false
+
+    # Backfill: true -> 1, false/nil -> 0 (already the column default)
+    execute 'UPDATE lato_users SET lato_cms_admin_role = 1 WHERE lato_cms_admin = 1'
+
+    remove_column :lato_users, :lato_cms_admin
+  end
+
+  def down
+    add_column :lato_users, :lato_cms_admin, :boolean, default: false
+
+    execute 'UPDATE lato_users SET lato_cms_admin = 1 WHERE lato_cms_admin_role = 1'
+
+    remove_column :lato_users, :lato_cms_admin_role
+  end
+end

data/lib/lato_cms/config.rb

@@ -3,11 +3,18 @@ module LatoCms
   # This class contains the default configuration of the engine.
   ##
   class Config
-    attr_accessor :locales, :templates_path
+    attr_accessor :locales, :templates_path, :admin_roles
 
     def initialize
       @locales = [:en]
       @templates_path = 'config/lato_cms'
+
+      # Admin roles exposed on Lato::User#lato_cms_admin_role and rendered
+      # as a select by lato_users. Ordered map of role key => integer value;
+      # labels are resolved via i18n (lato_cms.admin_roles.<key>).
+      # `operator` has read/edit access; `admin` also manages pages
+      # (create, update, delete) and translation links.
+      @admin_roles = { none: 0, operator: 1, admin: 2 }
     end
   end
 end

data/lib/lato_cms/engine.rb

@@ -9,5 +9,32 @@ module LatoCms
     initializer "lato_cms.precompile" do |app|
       app.config.assets.precompile << "lato_cms_manifest.js"
     end
+
+    # Expose the CMS admin role options on the shared Lato::User model.
+    # lato_users (when mounted) discovers the `lato_cms_admin_role` column by
+    # convention and calls this method to build the role selector. Defined
+    # here so it works regardless of whether lato_users is installed.
+    config.to_prepare do
+      Lato::User.class_eval do
+        # Role options for the lato_cms_admin_role permission.
+        # Returns [[label, value], ...] with labels resolved at call time.
+        def self.lato_cms_admin_role_options
+          LatoCms.config.admin_roles.map do |key, value|
+            [I18n.t("lato_cms.admin_roles.#{key}"), value]
+          end
+        end
+
+        # True when the user can access the CMS section (operator or admin).
+        def lato_cms_access?
+          lato_cms_admin_role.to_i.positive?
+        end
+
+        # True when the user has the admin role: full page management
+        # (create, update, delete) and translation links.
+        def lato_cms_admin?
+          lato_cms_admin_role.to_i >= LatoCms.config.admin_roles.fetch(:admin, 0)
+        end
+      end
+    end
   end
 end

data/lib/lato_cms/version.rb

@@ -1,3 +1,3 @@
 module LatoCms
-  VERSION = "3.0.5"
+  VERSION = "3.0.7"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: lato_cms
 version: !ruby/object:Gem::Version
-  version: 3.0.5
+  version: 3.0.7
 platform: ruby
 authors:
 - Gregorio Galante
@@ -120,6 +120,7 @@ files:
 - app/views/lato_cms/pages/_form_update.html.erb
 - app/views/lato_cms/pages/_repeater.html.erb
 - app/views/lato_cms/pages/_repeater_item.html.erb
+- app/views/lato_cms/pages/_translations.html.erb
 - app/views/lato_cms/pages/create.html.erb
 - app/views/lato_cms/pages/fields/_boolean.html.erb
 - app/views/lato_cms/pages/fields/_color.html.erb
@@ -137,6 +138,7 @@ files:
 - app/views/lato_cms/pages/fields/_textarea.html.erb
 - app/views/lato_cms/pages/index.html.erb
 - app/views/lato_cms/pages/show.html.erb
+- app/views/lato_cms/pages/translations.html.erb
 - app/views/lato_cms/pages/update.html.erb
 - config/importmap.rb
 - config/locales/en.yml
@@ -145,6 +147,8 @@ files:
 - db/migrate/20250328072343_add_lato_cms_admin_to_lato_user.rb
 - db/migrate/20260320070819_create_lato_cms_pages.rb
 - db/migrate/20260323171241_create_lato_cms_page_fields.rb
+- db/migrate/20260705000000_add_translation_group_id_to_lato_cms_pages.rb
+- db/migrate/20260712092241_change_lato_cms_admin_to_lato_cms_admin_role_on_lato_user.rb
 - lib/lato_cms.rb
 - lib/lato_cms/config.rb
 - lib/lato_cms/engine.rb