Commit Graph

15 Commits

Author SHA1 Message Date
Noah Petherbridge
b619e0c02e Send inner circle status as VIP to BareRTC 2023-09-03 12:08:45 -07:00
Noah Petherbridge
bf71ed421c Maintenance Mode + Blockable Admin Scope 2023-08-16 22:09:04 -07:00
Noah Petherbridge
ece83a0b23 Test update to chat country flags 2023-08-15 20:56:22 -07:00
Noah Petherbridge
79a6b8048c Fix country flag with code for chat room 2023-08-05 20:11:55 -07:00
Noah Petherbridge
0c5db949aa Country Flags and Genders for the chat room 2023-08-05 19:37:15 -07:00
Noah Petherbridge
47aaf15078 Admin Groups & Permissions
Add a permission system for admin users so you can lock down specific admins to
a narrower set of features instead of them all having omnipotent powers.

* New page: Admin Dashboard -> Admin Permissions Management
* Permissions are handled in the form of 'scopes' relevant to each feature or
  action on the site. Scopes are assigned to Groups, and in turn, admin user
  accounts are placed in those Groups.
* The Superusers group (scope '*') has wildcard permission to all scopes. The
  permissions dashboard has a create-once action to initialize the Superusers
  for the first admin who clicks on it, and places that admin in the group.

The following are the exhaustive list of permission changes on the site:

* Moderator scopes:
    * Chat room (enter the room with Operator permission)
    * Forums (can edit or delete user posts on the forum)
    * Photo Gallery (can see all private/friends-only photos on the site
      gallery or user profile pages)
* Certification photos (with nuanced sub-action permissions)
    * Approve: has access to the Pending tab to act on incoming pictures
    * List: can paginate thru past approved/rejected photos
    * View: can bring up specific user cert photo from their profile
    * The minimum requirement is Approve or else no cert photo page
      will load for your admin user.
* User Actions (each action individually scoped)
    * Impersonate
    * Ban
    * Delete
    * Promote to admin
* Inner circle whitelist: no longer are admins automatically part of the
  inner circle unless they have a specialized scope attached.

The AdminRequired decorator may also apply scopes on an entire admin route.
The following routes have scopes to limit them:

* Forum Admin (manage forums and their settings)
* Remove from inner circle
2023-08-01 20:39:48 -07:00
Noah Petherbridge
98c6a51951 Bugfix on chat URL 2023-07-30 10:56:14 -07:00
Noah Petherbridge
83391fe5c0 CachedBlocklist support for the chat room 2023-07-30 10:33:04 -07:00
Noah Petherbridge
78abee6e9e Online users badge in the Chat link on nav bar 2023-06-07 21:59:15 -07:00
Noah Petherbridge
7af6d82fc7 Shorter JWT token lifetime to enter chat 2023-04-19 19:56:09 -07:00
Noah Petherbridge
0527ff54b5 Display names for BareRTC 2023-04-18 22:19:08 -07:00
Noah Petherbridge
7d17dce4d4 Shy Accounts
* Users with private profiles or no public photo at all are considered
  to be Shy Accounts and are isolated from the non-shy profiles.
* Restrictions include:
  * Site Gallery shows only them + their friends' photos.
  * User Galleries: must be a friend or had private photos granted to
    see a user's gallery page.
  * DMs: can not initiate a DM to a non-shy member (other shy members
    OK).
2023-02-13 22:19:18 -08:00
Noah Petherbridge
c4600ff6ce Use anonymized avatars in chat for non-public profile pics 2023-02-12 22:23:51 -08:00
Noah Petherbridge
c098c2f8d8 Chat API endpoint 2023-02-09 23:07:07 -08:00
Noah Petherbridge
050ce19160 Chat launch page for BareRTC 2023-02-05 20:26:36 -08:00