Changeset 640b39c in Klonkt for src/config

Timestamp:

06/14/2026 04:25:27 PM (3 months ago)

Author:

roboburr <roboburr@…>

Branches:

main

Children:

a64f642

Parents:

8cb1dc7

Message:

auth: read-only view accounts (view everything, modify nothing)

New users.readonly column + readonly in the session. Global guard in server.js
blocks every state-modifying method (POST/PUT/PATCH/DELETE) for read-only
accounts -> no comments, saves, settings, nothing. GET remains free, so they
can view everything (including admin panels). Sticky "read-only demo" banner in
the shell when such an account is logged in.

Co-Authored-By: Claude <noreply@…>

File:

• src/config/database.js (modified) (1 diff)

src/config/database.js

@@ -41 +41 @@
   // Google OAuth: koppel een Google-account aan een user (login via Google).
   ensureColumn('users', 'google_sub', 'TEXT');
+  // Read-only/kijk-account: kan alles bekijken maar geen wijzigingen doen.
+  ensureColumn('users', 'readonly', 'INTEGER DEFAULT 0');
   // Site-level moderation toggle. 'trust' = auto-approve, 'moderate' = pending until reviewed.
   ensureColumn('sites', 'comments_moderation_mode', "TEXT DEFAULT 'trust'");