fix: add role-based permissions to forms page

- Hide Generate Default Template and Save Changes buttons for wizard/observer
- Backend already enforces owner/researcher for mutations
- UI now provides cleaner experience for read-only roles

src/app/(dashboard)/studies/[id]/forms/page.tsx

@@ -254,6 +254,9 @@ export default function StudyFormsPage({ params }: StudyFormsPageProps) {
 
   if (!study) return <div>Loading...</div>;
 
+  const userRole = (study as any)?.userRole;
+  const canManage = userRole === "owner" || userRole === "researcher";
+
   return (
     <EntityView>
       <PageHeader
@@ -268,48 +271,50 @@ export default function StudyFormsPage({ params }: StudyFormsPageProps) {
           icon="FileText"
           description="Design and manage the consent form that participants must sign before participating in your trials."
           actions={
-            <div className="flex gap-2">
+            canManage ? (
-              <Button
+              <div className="flex gap-2">
-                variant="outline"
-                size="sm"
-                onClick={() =>
-                  generateConsentMutation.mutate({ studyId: study.id })
-                }
-                disabled={
-                  generateConsentMutation.isPending ||
-                  updateConsentMutation.isPending
-                }
-              >
-                {generateConsentMutation.isPending ? (
-                  <Loader2 className="mr-2 h-4 w-4 animate-spin" />
-                ) : (
-                  <Plus className="mr-2 h-4 w-4" />
-                )}
-                Generate Default Template
-              </Button>
-              {activeConsentForm && (
                 <Button
+                  variant="outline"
                   size="sm"
                   onClick={() =>
-                    updateConsentMutation.mutate({
+                    generateConsentMutation.mutate({ studyId: study.id })
-                      studyId: study.id,
-                      content: editorTarget,
-                    })
                   }
                   disabled={
-                    updateConsentMutation.isPending ||
+                    generateConsentMutation.isPending ||
-                    editorTarget === activeConsentForm.content
+                    updateConsentMutation.isPending
                   }
                 >
-                  {updateConsentMutation.isPending ? (
+                  {generateConsentMutation.isPending ? (
                     <Loader2 className="mr-2 h-4 w-4 animate-spin" />
                   ) : (
-                    <Save className="mr-2 h-4 w-4" />
+                    <Plus className="mr-2 h-4 w-4" />
                   )}
-                  Save Changes
+                  Generate Default Template
                 </Button>
-              )}
+                {activeConsentForm && (
-            </div>
+                  <Button
+                    size="sm"
+                    onClick={() =>
+                      updateConsentMutation.mutate({
+                        studyId: study.id,
+                        content: editorTarget,
+                      })
+                    }
+                    disabled={
+                      updateConsentMutation.isPending ||
+                      editorTarget === activeConsentForm.content
+                    }
+                  >
+                    {updateConsentMutation.isPending ? (
+                      <Loader2 className="mr-2 h-4 w-4 animate-spin" />
+                    ) : (
+                      <Save className="mr-2 h-4 w-4" />
+                    )}
+                    Save Changes
+                  </Button>
+                )}
+              </div>
+            ) : null
           }
         >
           {activeConsentForm ? (