admin and logging permissions #29

Closed
opened 2026-09-17 12:50:52 -07:00 by rays · 1 comment
Owner

Make sure admin and logging options are never rendered from the server. Right now you can see the UI for those options rendering as part of a refresh then disappearing. The server shouldn't render the admin option and it should verify admin/log reauests as allowed by the user.

Make sure admin and logging options are never rendered from the server. Right now you can see the UI for those options rendering as part of a refresh then disappearing. The server shouldn't render the admin option and it should verify admin/log reauests as allowed by the user.
rays added the bug label 2026-09-17 13:23:47 -07:00
Author
Owner

Fixed in d7a4a0b, deployed: the server leaves the Log button hidden in a non-admin's page, so it no longer flashes on load. The server already refused /api/logs and settings changes (403) to non-admins; Settings itself is shown to everyone on purpose (theme, OPML export), with its admin-only fields only rendered for admins.

Fixed in d7a4a0b, deployed: the server leaves the Log button hidden in a non-admin's page, so it no longer flashes on load. The server already refused /api/logs and settings changes (403) to non-admins; Settings itself is shown to everyone on purpose (theme, OPML export), with its admin-only fields only rendered for admins.
rays closed this issue 2026-09-18 05:15:21 -07:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: rays/ipodderx-rs#29