Paradaux
Issues
Open ↗

PAR-36

0

Ability to view other players network/me pages as an administrator team

DonerianEconomy ExplorerFeature

Let the admin team view another player's /me (and network) pages.

Grounded: economy-explorer/app/me/page.tsx (+ app/me/market) resolve the viewer's own identity from the session and are strictly self-scoped. There's no way for an admin to inspect a specific player's personal dashboard.

Add an admin-only impersonation/lookup: e.g. /me?as=<player> (or /admin/players/<uuid>) gated on the admin role via getViewer()/requireRole, reusing the same /me data functions but keyed on the target player. Audit the access (explorer_audit) since it exposes another player's private financial view.

Resources

Comments

No comments yet.

Activity

  • ParadauxIO linked a commit — Commit 5cd8a1b — Merge pull request #23 from MCCitiesNetwork/develop
  • ParadauxIO linked a commit — Commit c99e937 — Admin player data viewer: look up any player and see their /me dashboard (PAR-36)
  • ParadauxIO changed status to Status → Done
  • ParadauxIO linked a pull request — PR #23 merged — Release: admin player data viewer (PAR-36)
  • tesks changed status to Status → Pending Release
  • ParadauxIO linked a pull request — PR #23 open — Release: admin player data viewer (PAR-36)
  • ParadauxIO linked a commit — Commit c99e937 — Admin player data viewer: look up any player and see their /me dashboard (PAR-36)
  • tesks changed status to Status → In Progress
  • paradaux changed status to Status → Planned
  • paradaux description: Description updated
  • tesks updated labels (Labels updated)
  • tesks description: Description updated
  • tesks assigned Assigned to rian