Changeset 8cb1dc7 in Klonkt for src/views/pages/admin-comments.ejs

Timestamp:

06/14/2026 04:17:14 PM (3 months ago)

Author:

roboburr <roboburr@…>

Branches:

main

Children:

640b39c

Parents:

ccbd6a6

Message:

hub: artist self-management — owner manages their own subsite (posts/appearance/comments)

A site owner (member) now gets a "My PrutFolio" dashboard and can manage their
OWN site; cross-site access is restricted.

• auth.js: requireSiteManager (owner of res.locals.site or god) + requireSiteManagerBySlug (owner of :slug or god).
• admin.js: /admin role-aware -> god=hub management, owner=my-site dashboard, member without site=403.
• admin-sites.js: /:slug/edit + /save owner-or-god (was god-only); upload-photo requireAuth. list/new/create/delete remain god-only.
• admin-comments.js: requireSiteManager + redirects/form actions via siteUrlBase so the artist context (/user/<slug>/admin/comments) is correct.
• render.js: userOwnsSite flag; topnav + overview show "Admin" for owners; topnav "New post" uses siteUrlBase.
• pages/my-site.ejs: artist dashboard.

Co-Authored-By: Claude <noreply@…>

File:

• src/views/pages/admin-comments.ejs (modified) (2 diffs)

src/views/pages/admin-comments.ejs

@@ -26 +26 @@
             <strong><%= c.author_username %></strong>
             <% if (c.parent_comment_id) { %><span class="muted">(reply)</span><% } %>
-            on <a href="/<%= c.post_slug %>"><%= c.post_title || c.post_slug %></a>
+            on <a href="<%= siteUrlBase %>/<%= c.post_slug %>"><%= c.post_title || c.post_slug %></a>
             <span class="muted">&middot; <%= formatDateTime(c.created_at) %></span>
           </div>
           <blockquote class="moderation-content"><%= c.content %></blockquote>
           <div class="moderation-actions">
-            <form method="post" action="/admin/comments/<%= c.id %>/approve" style="display:inline">
+            <form method="post" action="<%= siteUrlBase %>/admin/comments/<%= c.id %>/approve" style="display:inline">
               <button type="submit" class="btn btn-primary">Approve</button>
             </form>
-            <form method="post" action="/admin/comments/<%= c.id %>/reject" style="display:inline">
+            <form method="post" action="<%= siteUrlBase %>/admin/comments/<%= c.id %>/reject" style="display:inline">
               <button type="submit" class="btn btn-danger">Reject</button>
             </form>
@@ -55 +55 @@
           <tr class="status-<%= c.status %>">
             <td><%= c.author_username %></td>
-            <td><a href="/<%= c.post_slug %>"><%= c.post_title || c.post_slug %></a></td>
+            <td><a href="<%= siteUrlBase %>/<%= c.post_slug %>"><%= c.post_title || c.post_slug %></a></td>
             <td>
               <span class="status-pill status-pill--<%= c.status %>"><%= c.status %></span>