Changeset a3169f5 in Klonkt for src/middleware

Timestamp:

06/14/2026 06:35:59 PM (3 months ago)

Author:

roboburr <roboburr@…>

Branches:

main

Children:

ce8c8c2

Parents:

5e95aac

Message:

fix: viewer now sees the Admin link too (canSeeBeheer)

The Admin link was hidden for a viewer (nav only showed it for god/admin/site
owner), while the routes do allow a viewer read-only access. Single source of
truth canSeeBeheer (god/admin/viewer/owner) in render.js, used in topnav,
hub-nav, and profile sheet.

Co-Authored-By: Claude <noreply@…>

File:

• src/middleware/render.js (modified) (1 diff)

src/middleware/render.js

@@ -56 +56 @@
   const _isViewer = isViewer(_u);
 
+  // Wie ziet de "Beheer"-link? god/admin, een site-eigenaar (artiest-zelfbeheer),
+  // én een kijker (mag het Beheer alleen-lezen inzien). Eén bron van waarheid,
+  // gespiegeld in topnav/hub-nav/profielsheet — anders raakt de link verborgen
+  // voor wie 'm wél mag zien (kijker zag 'm eerst nergens).
+  const _role = _u ? _u.role : null;
+  const canSeeBeheer = !!(_u && (_role === 'god' || _role === 'admin' || _role === 'kijker' || userOwnsSite));
+
   // Common locals
   const locals = {
     user: _u,
     userOwnsSite,
+    canSeeBeheer,
     isViewer: _isViewer,
     canMutate: !_isViewer,