Skip to content

Draft: Handle moderation privileges

Fix #206 (closed)
For BE MR pleroma!3676 (closed)

  • Make admin-fe aware of privileges
  • Make sure a privileged non-admin can log in
  • Only show menu/options to those who are privileged
    • Sidebar
    • Make sure you're redirected to a privileged route after login
    • Only show privileged options in the pages themselves
      • Users
        • "Moderate multiple users" dropdown
          • Bug: Changing tags wont show if the user can't fetch the config (i.e. is non-admin)
        • "Moderation" dropdown
        • "Create new account"
        • Click a user > "Moderate user"
      • Statuses
        • "Change scope" dropdown
      • Reports
        • "Moderate user" dropdown
      • Moderation Log
        • Link to users and to specific reports
    • Don't do unprivileged calls (e.g. after login /api/pleroma/admin/config is called)
  • Make sure error messages are correct (e.g. when not logged in, you now get message about needing to be admin, but not only admins are able to log in)
  • What if I have privileges, but none to give me a menu? What happens then, is that acceptable, and how to handle it properly? => You're now redirected to the /401 page.
  • Check if #213 could/should be done here
Edited by Ilja

Merge request reports