Paradaux
IssuesPAR-36PlannedOpen ↗
0

Ability to view other players network/me pages as an administrator team

Let the admin team view another player's /me (and network) pages.

Grounded: economy-explorer/app/me/page.tsx (+ app/me/market) resolve the viewer's own identity from the session and are strictly self-scoped. There's no way for an admin to inspect a specific player's personal dashboard.

Add an admin-only impersonation/lookup: e.g. /me?as=<player> (or /admin/players/<uuid>) gated on the admin role via getViewer()/requireRole, reusing the same /me data functions but keyed on the target player. Audit the access (explorer_audit) since it exposes another player's private financial view.

Comments

No comments yet.

Activity

  • paradaux description: Description updatedJun 7, 2026, 9:03 PM
  • paradaux changed status to Status → PlannedJun 7, 2026, 9:03 PM
  • tesks description: Description updatedJun 4, 2026, 8:56 PM
  • tesks updated labels (Labels updated)Jun 4, 2026, 8:56 PM
  • tesks assigned Assigned to rianJun 4, 2026, 9:26 AM