Changeset 8afbdd6 in Klonkt for src/views/pages/admin-users.ejs

Timestamp:

06/14/2026 06:07:51 PM (3 months ago)

Author:

roboburr <roboburr@…>

Branches:

main

Children:

c869272

Parents:

b94c08e

Message:

feat: viewer role + artists directory + Klonkt Hub Beta rebrand

Viewer role (replaces the separate view-mode/readonly toggle):

• 'kijker' is now a real role (VALID_ROLES) selectable in Admin. May view EVERYTHING including Admin, but cannot modify anything.
• isViewer(user) (= role kijker or legacy readonly flag) is the source; requireGod/requireSiteManager(BySlug) let a viewer through (viewing), the global guard 403s every write. Existing readonly accounts are migrated on each role change (readonly=0).
• Write leaks via GET patched: /prutter/new (INSERT) blocks for viewers, /prutter/:id skips markAsRead (UPDATE); WS upgrade rejects viewers (the HTTP guard doesn't cover WebSockets).
• Clean "Viewer mode" page (viewer-blocked) instead of raw 403 text; styled sticky banner; account page shows read-only UI instead of an upload button that silently 403s. canMutate hides write buttons.

Scalability (>50 artists):

• Hub home shows max 24 (most active first) + "All N artists ->".
• New searchable, paginated /artiesten directory (hub only).
• 'user' + 'artiesten' reserved as slugs.

Rebrand PrutFolio v1 -> Klonkt Hub Beta (footer, PWA manifest, account/
admin texts, default page title, startup, README; internal package +
PWA id 'prutfolio' remain for stability).

Co-Authored-By: Claude <noreply@…>

File:

• src/views/pages/admin-users.ejs (modified) (4 diffs)

src/views/pages/admin-users.ejs

@@ -5 +5 @@
     <div>
       <h1>Users</h1>
-      <p class="ax-tagline">Beheer gebruikers, rollen, en verwijderingen.</p>
+      <p class="ax-tagline">Beheer gebruikers, rollen, en verwijderingen. Rol <strong>kijker</strong> = alles bekijken (incl. Beheer), niets wijzigen — handig voor demo's.</p>
     </div>
   </header>
@@ -58 +58 @@
               <label class="ax-role">
                 <span>Rol</span>
-                <select name="role" onchange="this.form.submit()" <% if (u.id === user.id) { %>disabled<% } %>>
+                <select name="role" onchange="this.form.submit()" <% if (u.id === user.id || !canMutate) { %>disabled<% } %>>
+                  <option value="kijker" <%= u.role === 'kijker' ? 'selected' : '' %>>kijker</option>
                   <option value="member" <%= u.role === 'member' ? 'selected' : '' %>>member</option>
                   <option value="admin"  <%= u.role === 'admin'  ? 'selected' : '' %>>admin</option>
@@ -66 +67 @@
             </form>
 
-            <form method="post" action="/admin/users/<%= u.id %>/readonly" class="ax-role-form">
-              <label class="ax-role ax-ro" title="Alleen-lezen: kan alles bekijken, niets wijzigen">
-                <span>Kijk-modus</span>
-                <input type="checkbox" name="readonly" value="1" <%= u.readonly ? 'checked' : '' %>
-                       onchange="this.form.submit()" <% if (u.id === user.id) { %>disabled<% } %>>
-              </label>
-            </form>
-
-            <% if (u.id !== user.id) { %>
+            <% if (u.id !== user.id && canMutate) { %>
               <% var _warn = (u.post_count + u.site_count > 0)
                    ? ('Dit verwijdert ook hun site + ' + u.post_count + ' post(s). ')
@@ -83 +76 @@
               </form>
             <% } else { %>
-              <%# Lege plek zodat de kolommen (rol/kijk-modus) op elke rij uitlijnen. %>
+              <%# Lege plek zodat de rol-kolom op elke rij uitlijnt. %>
               <span class="ax-icon-btn-spacer" aria-hidden="true"></span>
             <% } %>