Skip to content

feat(web): add whitelist-based admin access control - #3

Open
znan2 wants to merge 1 commit into
mainfrom
feat/admin-audit-dashboard
Open

feat(web): add whitelist-based admin access control#3
znan2 wants to merge 1 commit into
mainfrom
feat/admin-audit-dashboard

Conversation

@znan2

@znan2 znan2 commented Apr 16, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • add code-based whitelist access control for /admin (no env dependency)
  • restrict admin route access to whitelisted users and redirect non-whitelisted users to /
  • hide Admin Audit menu for non-whitelisted users
  • add mini README for whitelist maintenance:
    • web/docs/admin-whitelist-mini-readme.md

Files changed

  • web/src/config/adminWhitelist.ts
  • web/src/App.tsx
  • web/src/components/AppLayout.tsx
  • web/docs/admin-whitelist-mini-readme.md

Test plan

  • cd web && npm run build
  • login with whitelisted email and confirm /admin is accessible
  • login with non-whitelisted account and confirm /admin redirects to /
  • confirm non-whitelisted account cannot see Admin Audit menu

Restrict /admin access and sidebar visibility to code-managed whitelisted accounts using Supabase user identity fields, and add a mini README documenting maintenance for demo operations.

Made-with: Cursor
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant