fix: hide the favorite button for workspaces you don't own (#28000)

site/src/pages/WorkspacePage/WorkspaceActions/WorkspaceActions.stories.tsx

@@ -211,6 +211,15 @@ export const CancelHiddenForUser: Story = {
 	},
 };
 
+export const FavoriteHiddenForNonOwner: Story = {
+	args: {
+		workspace: Mocks.MockWorkspace,
+	},
+	parameters: {
+		user: Mocks.MockUserMember,
+	},
+};
+
 export const OpenDownloadLogs: Story = {
 	args: {
 		workspace: Mocks.MockWorkspace,

site/src/pages/WorkspacePage/WorkspaceActions/WorkspaceActions.tsx

@@ -178,11 +178,14 @@ export const WorkspaceActions: FC<WorkspaceActionsProps> = ({
 
 			{canCancel && <CancelButton handleAction={handleCancel} />}
 
-			<FavoriteButton
-				workspaceID={workspace.id}
-				isFavorite={workspace.favorite}
-				onToggle={handleToggleFavorite}
-			/>
+			{/* Only the owner can favorite a workspace. */}
+			{user.id === workspace.owner_id && (
+				<FavoriteButton
+					workspaceID={workspace.id}
+					isFavorite={workspace.favorite}
+					onToggle={handleToggleFavorite}
+				/>
+			)}
 
 			{permissions.shareWorkspace && (
 				<ShareButton