client/auth: fix being able to rate/fav things

client/css/comments.styl

@@ -85,6 +85,7 @@
                 margin-left: 2em
                 font-size: 95%
             .edit, .delete, .score-container a, .nickname a
+                &:not(.inactive)
                     color: mix($main-color, $inactive-tab-text-color)
             .edit, .delete
                 font-size: 80%

client/html/score.tpl

@@ -9,7 +9,7 @@
         <span class='vim-nav-hint'>like</span>
     </a>
 <% } else { %>
-    <a href class='upvote inactive'>
+    <a class='upvote inactive'>
         <i class='fa fa-thumbs-o-up'></i>
     </a>
 <% } %>

client/js/controllers/post_controller.js

@@ -222,6 +222,9 @@ class PostController {
     }
 
     _evtScorePost(e) {
+        if (!api.hasPrivilege('posts:score')) {
+            return;
+        }
         e.detail.post.setScore(e.detail.score)
             .catch(errorMessage => {
                 window.alert(errorMessage);
@@ -229,6 +232,9 @@ class PostController {
     }
 
     _evtFavoritePost(e) {
+        if (!api.hasPrivilege('posts:favorite')) {
+            return;
+        }
         e.detail.post.addToFavorites()
             .catch(errorMessage => {
                 window.alert(errorMessage);
@@ -236,6 +242,9 @@ class PostController {
     }
 
     _evtUnfavoritePost(e) {
+        if (!api.hasPrivilege('posts:favorite')) {
+            return;
+        }
         e.detail.post.removeFromFavorites()
             .catch(errorMessage => {
                 window.alert(errorMessage);

client/js/controls/comment_control.js

@@ -90,6 +90,9 @@ class CommentControl extends events.EventTarget {
 
     _evtScoreClick(e, score) {
         e.preventDefault();
+        if (!api.hasPrivilege('comments:score')) {
+            return;
+        }
         this.dispatchEvent(new CustomEvent('score', {
             detail: {
                 comment: this._comment,