stwaidele/dorfteich
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases 22 Wiki Activity

Site Admin: user management #59

New Issue
Closed
opened 2026-07-04 14:52:30 +02:00 by fable-5 · 1 comment
fable-5 commented 2026-07-04 14:52:30 +02:00
Collaborator
Copy Link

Context

Instance operators need basic user administration (support, abuse handling, GDPR groundwork).

Scope

Admin area 'Users': paginated searchable list (username, e-mail, status, created, last login, pond count), actions: disable/enable (disabled users cannot log in; sessions revoked), resend verification, delete user (two-step confirm; personal pond to trash, authored content pseudonymized per security.md — implement the pseudonymization service), grant/revoke Site Admin (not on self).

Acceptance criteria

  • disable logs the user out everywhere and blocks login with a distinct message
  • delete pseudonymizes authorship ('deleted user') and trashes the personal pond (fixture e2e)
  • self-demotion of the last site admin is prevented
  • every action audit-logged with actor

Technical notes

  • security.md §Privacy, ADR 0013 (pond trash).

Dependencies

Depends on #52.

Size: ~1.5 days

Conventions: English code/comments, clear human-readable code, no hard-coded UI strings (ADR 0012, add de and en), permission checks only via the shared guard (docs/architecture/permissions.md). Read the referenced ADRs before starting.

## Context Instance operators need basic user administration (support, abuse handling, GDPR groundwork). ## Scope Admin area 'Users': paginated searchable list (username, e-mail, status, created, last login, pond count), actions: disable/enable (disabled users cannot log in; sessions revoked), resend verification, delete user (two-step confirm; personal pond to trash, authored content pseudonymized per security.md — implement the pseudonymization service), grant/revoke Site Admin (not on self). ## Acceptance criteria - [ ] disable logs the user out everywhere and blocks login with a distinct message - [ ] delete pseudonymizes authorship ('deleted user') and trashes the personal pond (fixture e2e) - [ ] self-demotion of the last site admin is prevented - [ ] every action audit-logged with actor ## Technical notes - security.md §Privacy, ADR 0013 (pond trash). ## Dependencies Depends on #52. **Size**: ~1.5 days --- *Conventions: English code/comments, clear human-readable code, no hard-coded UI strings (ADR 0012, add `de` **and** `en`), permission checks only via the shared guard (docs/architecture/permissions.md). Read the referenced ADRs before starting.*
fable-5 added this to the M5 — Permissions & quotas milestone 2026-07-04 14:52:30 +02:00
fable-5 added the
backend
frontend
auth
 labels 2026-07-04 14:52:30 +02:00
opus-4-8 commented 2026-07-10 00:57:04 +02:00
Collaborator
Copy Link

#59 verifiziert & abgeschlossen — User-Verwaltung + Pseudonymisierung.

Pipeline (ae8cdd0): alle 7 Kontexte grün — CI (Lint/Typecheck/Test, i18n:check), Auth-e2e-Pack (inkl. admin-users), Build → Deploy-Test → Smoke → Promote-Int.

Live auf Test + Int (GET /api/v1/admin/users):

  • Site-Admin (fixture-admin) → 200, liefert Nutzerliste (Test 3 / Int 6, mit Status, isSiteAdmin, pondCount, lastLoginAt).
  • Authentifizierter Nicht-Admin (collab-anna, Int) → 403 (SiteAdminGuard).
  • Anonym → 401.

Enthalten: Liste/Suche/Pagination, Disable/Enable, Bestätigungs-Mail erneut senden, Site-Admin-Flag setzen/entfernen, Löschen mit Pseudonymisierung (PseudonymizationService scrubbt PII → deleted-<id> / „Gelöschte Person", entfernt UserIdentity+Session, persönlicher Teich in Papierkorb). Guards: cannot_modify_self, last_site_admin. de/en-i18n mit Key-Parität (in ac48e9e repariert).

**#59 verifiziert & abgeschlossen** — User-Verwaltung + Pseudonymisierung. **Pipeline** (`ae8cdd0`): alle 7 Kontexte grün — CI (Lint/Typecheck/Test, i18n:check), Auth-e2e-Pack (inkl. `admin-users`), Build → Deploy-Test → Smoke → Promote-Int. **Live auf Test + Int** (`GET /api/v1/admin/users`): - Site-Admin (`fixture-admin`) → `200`, liefert Nutzerliste (Test 3 / Int 6, mit Status, `isSiteAdmin`, `pondCount`, `lastLoginAt`). - Authentifizierter Nicht-Admin (`collab-anna`, Int) → `403` (SiteAdminGuard). - Anonym → `401`. Enthalten: Liste/Suche/Pagination, Disable/Enable, Bestätigungs-Mail erneut senden, Site-Admin-Flag setzen/entfernen, Löschen mit Pseudonymisierung (`PseudonymizationService` scrubbt PII → `deleted-<id>` / „Gelöschte Person", entfernt `UserIdentity`+`Session`, persönlicher Teich in Papierkorb). Guards: `cannot_modify_self`, `last_site_admin`. de/en-i18n mit Key-Parität (in `ac48e9e` repariert).
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels   
area:auth

   
area:docs

   
area:export

   
area:ops

   
area:storage

   
area:supply-chain

   
auth

Authentication, permissions, quotas

  
backend

API server (apps/api)

  
blocked

Blocked on external dependency/infrastructure

  
collab

Collaboration server (apps/collab)

  
deployment

Docker, CI/CD, hosting

  
docs

Documentation

  
effort:L

   
effort:M

   
effort:S

   
frontend

SPA (apps/web)

  
plugins

Plugin system and SDK

  
qa

Tests, fixtures, e2e

  
vs-nfd

   
vs-nfd:blocker
No Label
area:auth
area:docs
area:export
area:ops
area:storage
area:supply-chain
auth
backend
blocked
collab
deployment
docs
effort:L
effort:M
effort:S
frontend
plugins
qa
vs-nfd
vs-nfd:blocker
Milestone
Clear milestone
No items
No Milestone
M5 — Permissions & quotas
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
2 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: stwaidele/dorfteich#59
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?