Changeset a3169f5 in Klonkt

Timestamp:

06/14/2026 06:35:59 PM (3 months ago)

Author:

roboburr <roboburr@…>

Branches:

main

Children:

ce8c8c2

Parents:

5e95aac

Message:

fix: viewer now sees the Admin link too (canSeeBeheer)

The Admin link was hidden for a viewer (nav only showed it for god/admin/site
owner), while the routes do allow a viewer read-only access. Single source of
truth canSeeBeheer (god/admin/viewer/owner) in render.js, used in topnav,
hub-nav, and profile sheet.

Co-Authored-By: Claude <noreply@…>

Location:

src

Files:

• middleware/render.js (modified) (1 diff)
• views/pages/hub-home.ejs (modified) (1 diff)
• views/partials/profile-sheet.ejs (modified) (1 diff)
• views/partials/topnav.ejs (modified) (1 diff)

src/middleware/render.js

@@ -56 +56 @@
   const _isViewer = isViewer(_u);
 
+  // Wie ziet de "Beheer"-link? god/admin, een site-eigenaar (artiest-zelfbeheer),
+  // én een kijker (mag het Beheer alleen-lezen inzien). Eén bron van waarheid,
+  // gespiegeld in topnav/hub-nav/profielsheet — anders raakt de link verborgen
+  // voor wie 'm wél mag zien (kijker zag 'm eerst nergens).
+  const _role = _u ? _u.role : null;
+  const canSeeBeheer = !!(_u && (_role === 'god' || _role === 'admin' || _role === 'kijker' || userOwnsSite));
+
   // Common locals
   const locals = {
     user: _u,
     userOwnsSite,
+    canSeeBeheer,
     isViewer: _isViewer,
     canMutate: !_isViewer,

src/views/pages/hub-home.ejs

@@ -5 +5 @@
     <div class="hub-nav-inner container">
       <% if (user) { %>
-        <% if (user.role === 'god' || user.role === 'admin' || (typeof userOwnsSite !== 'undefined' && userOwnsSite)) { %>
+        <% if (typeof canSeeBeheer !== 'undefined' && canSeeBeheer) { %>
           <a class="hub-nav-link" href="/admin">Beheer</a>
         <% } %>

src/views/partials/profile-sheet.ejs

@@ -56 +56 @@
         </a>
       </li>
-      <% if (_isAdmin) { %>
+      <% if (typeof canSeeBeheer !== 'undefined' && canSeeBeheer) { %>
       <li role="none">
         <a href="/admin" class="profile-sheet-item" role="menuitem" data-close-sheet>

src/views/partials/topnav.ejs

@@ -115 +115 @@
                 <span>Account</span>
               </a>
-              <% if (user.role === 'god' || user.role === 'admin' || (typeof userOwnsSite !== 'undefined' && userOwnsSite)) { %>
+              <% if (typeof canSeeBeheer !== 'undefined' && canSeeBeheer) { %>
                 <a href="/admin" role="menuitem" class="udi">
                   <svg class="udi-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M3 3h7v7H3z"/><path d="M14 3h7v7h-7z"/><path d="M14 14h7v7h-7z"/><path d="M3 14h7v7H3z"/></svg>