Bernard Siebens
268cbe1e06
Features tab: create/edit flags, flip global switches, and toggle a flag per club from the club detail page. Where `everyone` is set the per-club toggle is replaced by a badge, because a toggle there would have no effect and so would lie about what is on. Admins tab: grant, promote, demote and revoke platform access. Gated on is_superuser, not is_staff -- the panel itself is staff-accessible, so letting staff grant is_superuser would collapse the two levels into one and stop is_superuser being a boundary we can later hang anything on. Two guardrails, enforced in the service so they hold regardless of caller: you cannot strip your own access (you would lose the panel mid-click), and the last superuser can never be demoted (the platform would be locked out of itself). Granted users get an unusable password and must enrol 2FA before they can sign in. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
74 lines
4.0 KiB
HTML
74 lines
4.0 KiB
HTML
{% extends "controlpanel/base.html" %}
|
|
{% load lucide %}
|
|
|
|
{% block heading %}Platform admins{% endblock heading %}
|
|
|
|
{% block subheading %}
|
|
<p class="text-sm opacity-70">Staff run the panel. Superusers additionally manage this list.</p>
|
|
{% endblock subheading %}
|
|
|
|
{% block actions %}
|
|
<a class="btn btn-primary gap-2" href="{% url 'controlpanel:admin_add' %}">{% lucide "user-plus" size=16 %} Grant access</a>
|
|
{% endblock actions %}
|
|
|
|
{% block panel %}
|
|
<div class="card bg-base-100 shadow">
|
|
<div class="card-body">
|
|
<div class="overflow-x-auto">
|
|
<table class="table">
|
|
<thead>
|
|
<tr>
|
|
<th>User</th>
|
|
<th>Staff</th>
|
|
<th>Superuser</th>
|
|
<th>Last login</th>
|
|
<th></th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
{% for admin in admins %}
|
|
<tr>
|
|
<td>
|
|
<div class="font-medium">{{ admin.email }}</div>
|
|
{% if admin.pk == user.pk %}<div class="text-xs opacity-60">That's you</div>{% endif %}
|
|
</td>
|
|
<td>
|
|
<form method="post" action="{% url 'controlpanel:admin_update' admin.pk %}">
|
|
{% csrf_token %}
|
|
<input type="hidden" name="is_staff" value="{% if admin.is_staff %}0{% else %}1{% endif %}">
|
|
<input type="hidden" name="is_superuser" value="{% if admin.is_superuser %}1{% else %}0{% endif %}">
|
|
<button class="btn btn-xs gap-1 {% if admin.is_staff %}btn-success{% else %}btn-ghost{% endif %}" type="submit">
|
|
{% if admin.is_staff %}{% lucide "check" size=14 %} Yes{% else %}No{% endif %}
|
|
</button>
|
|
</form>
|
|
</td>
|
|
<td>
|
|
<form method="post" action="{% url 'controlpanel:admin_update' admin.pk %}">
|
|
{% csrf_token %}
|
|
<input type="hidden" name="is_staff" value="{% if admin.is_staff %}1{% else %}0{% endif %}">
|
|
<input type="hidden" name="is_superuser" value="{% if admin.is_superuser %}0{% else %}1{% endif %}">
|
|
<button class="btn btn-xs gap-1 {% if admin.is_superuser %}btn-warning{% else %}btn-ghost{% endif %}" type="submit">
|
|
{% if admin.is_superuser %}{% lucide "shield" size=14 %} Yes{% else %}No{% endif %}
|
|
</button>
|
|
</form>
|
|
</td>
|
|
<td class="opacity-70">{{ admin.last_login|date:"j M Y"|default:"Never" }}</td>
|
|
<td class="text-right">
|
|
<form method="post" action="{% url 'controlpanel:admin_revoke' admin.pk %}">
|
|
{% csrf_token %}
|
|
<button class="btn btn-ghost btn-xs gap-1 text-error" type="submit">{% lucide "user-minus" size=14 %} Revoke</button>
|
|
</form>
|
|
</td>
|
|
</tr>
|
|
{% empty %}
|
|
<tr>
|
|
<td colspan="5" class="text-center opacity-60">No platform admins.</td>
|
|
</tr>
|
|
{% endfor %}
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
{% endblock panel %}
|