website/pkg/controller/admin/transparency.go

package admin

import (
	"net/http"

	"code.nonshy.com/nonshy/website/pkg/config"
	"code.nonshy.com/nonshy/website/pkg/models"
	"code.nonshy.com/nonshy/website/pkg/templates"
)

// Admin transparency page that lists the scopes and permissions an admin account has for all to see.
func Transparency() http.HandlerFunc {
	tmpl := templates.Must("admin/transparency.html")
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		var (
			username = r.PathValue("username")
		)

		// Get this user.
		user, err := models.FindUser(username)
		if err != nil {
			templates.NotFoundPage(w, r)
			return
		}

		// Only for admin user accounts.
		if !user.IsAdmin {
			templates.NotFoundPage(w, r)
			return
		}

		// Template variables.
		var vars = map[string]interface{}{
			"User":        user,
			"AdminScopes": config.ListAdminScopes(),
		}

		if err := tmpl.Execute(w, r, vars); err != nil {
			http.Error(w, err.Error(), http.StatusInternalServerError)
			return
		}
	})
}