|
${escapeHtml(user.username)}
${user.id === currentUser?.userId ? '(You)' : ""}
|
${getRoleBadge(user.role)}
${user.role !== "admin" ? `
${user.can_build ? 'Build' : 'No Build'}
${user.can_upload_files ? 'Upload' : 'No Upload'}
` : ''}
|
${formatDate(user.created_at)}
|
${user.last_login ? formatDate(user.last_login) : 'Never'}
|
${escapeHtml(user.created_by || "System")}
|
${
user.id !== currentUser?.userId
? `
${user.role === "operator" ? `
` : ''}
${user.role !== "admin" ? `
` : ''}
`
: 'Cannot edit yourself'
}
|
`,
)
.join("");
attachActionListeners();
}
function getRoleBadge(role) {
const badges = {
admin:
'
Feature Permissions
Manage feature access for ${escapeHtml(username)}.
Disabled features will return 403 when accessed.
${features.map(f => {
const meta = FEATURE_LABELS[f] || { label: f, icon: "fa-puzzle-piece" };
const checked = perms[f] !== false;
return `
`;
}).join("")}
`;
document.body.appendChild(modal);
document.getElementById("close-feature-modal").addEventListener("click", () => modal.remove());
modal.addEventListener("click", (e) => { if (e.target === modal) modal.remove(); });
document.getElementById("save-feature-perms").addEventListener("click", async () => {
const toggles = modal.querySelectorAll("[data-feature]");
const permissions = {};
toggles.forEach(t => { permissions[t.dataset.feature] = t.checked; });
try {
const saveRes = await fetch(`/api/users/${userId}/feature-permissions`, {
method: "PUT",
headers: { "Content-Type": "application/json" },
body: JSON.stringify({ permissions }),
});
if (!saveRes.ok) throw new Error("Failed to save");
modal.remove();
if (window.showToast) window.showToast("Feature permissions updated", "success");
} catch (err) {
alert("Failed to save feature permissions");
}
});
document.getElementById("reset-feature-perms").addEventListener("click", async () => {
if (!confirm("Reset all feature permissions to defaults (all enabled)?")) return;
try {
const delRes = await fetch(`/api/users/${userId}/feature-permissions`, { method: "DELETE" });
if (!delRes.ok) throw new Error("Failed to reset");
modal.remove();
if (window.showToast) window.showToast("Feature permissions reset", "success");
} catch (err) {
alert("Failed to reset feature permissions");
}
});
} catch (err) {
console.error("Feature permissions error:", err);
alert("Failed to load feature permissions");
}
};
window.configurePluginAccess = async function (userId, username) {
try {
const [accessRes, pluginsRes] = await Promise.all([
fetch(`/api/users/${userId}/plugin-access`),
fetch("/api/plugins"),
]);
if (!accessRes.ok) throw new Error("Failed to load plugin access");
const accessData = await accessRes.json();
const currentScope = accessData.scope || "none";
const allowedIds = new Set((accessData.rules || []).map(r => r.pluginId));
let allPlugins = [];
if (pluginsRes.ok) {
const pluginsData = await pluginsRes.json();
allPlugins = pluginsData.plugins || [];
}
let modal = document.getElementById("plugin-access-modal");
if (modal) modal.remove();
modal = document.createElement("div");
modal.id = "plugin-access-modal";
modal.className = "fixed inset-0 bg-black/50 backdrop-blur-sm z-50 flex items-center justify-center p-4";
const scopeOptions = [
{ value: "none", label: "No Access", desc: "User cannot access any plugins" },
{ value: "allowlist", label: "Selected Plugins", desc: "User can only access checked plugins" },
{ value: "all", label: "All Plugins", desc: "User can access all plugins" },
];
modal.innerHTML = `