Admin: other people's privileges, passwords and sessions #376

Closed

littlefox wants to merge 3 commits from issue-355-admin-users into main

pull from: issue-355-admin-users

merge into: littlefox:main

littlefox:main

littlefox:issue-398-forge-logs-api

littlefox:release-0.8.0

littlefox:issue-393-fedora-memory

Conversation 1 Commits 3 Files changed 9 +373 -4

littlefox commented 2026-10-27 23:52:03 +00:00

Owner

Copy link

Closes #355

Stacked on #354. Administration screen: "Personer" (privileges in plain words, with a second ask before taking away your own wheel/admin; a new password set with your own) and "Sessioner" (everyone's, any logged out after a second tap). In admin mode a channel's members can be added directly instead of invited. Devserver test admin_users; admin.spec (Petra, new in the seed).

🤖 Generated with Claude Code

https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Closes #355 Stacked on #354. Administration screen: "Personer" (privileges in plain words, with a second ask before taking away your own wheel/admin; a new password set with your own) and "Sessioner" (everyone's, any logged out after a second tap). In admin mode a channel's members can be added directly instead of invited. Devserver test `admin_users`; admin.spec (Petra, new in the seed). 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

littlefox added 23 commits 2026-10-27 23:52:04 +00:00

Create a channel from the directory ... 0ba55e3943

"Skapa kanal" in Alla kanaler opens a short form: the name, who can read
it (open, closed, secret), anonymous posts and secret members, and an
optional presentation. The channel is created with create-conf, joined,
and opened; the creator is its supervisor. A taken name, a server that
doesn't allow it, and a presentation that fails are said plainly.

kom-client gets admin.rs (ChannelKind, AdminError, create_channel), and
presentations work for any conference, not only my own person.

Refs #347

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Manage a channel: name, presentation, note on the door, FAQ ... 60591384b0

A channel's supervisor (or a member of the supervising conference) gets
"Hantera kanalen" under its status: rename it, write its presentation,
put up or take down the note on the door, and add or remove FAQs. Others
see the status as before. The server has the last word; a refusal is
said as "you may not change this channel".

The note is written as elisp writes it: a text to the server's motd
conference with the channel's name as subject, then set-etc-motd. A FAQ
is a text to the channel marked with faq-text.

Refs #348

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Test: what the channel status shows; phones open it through ⋯ ... 549d5c630c

Refs #347

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Test: open the channel status on phones through the ⋯ menu ... ca01beaedd

Refs #348

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Merge issue-347-create-channel into issue-348-manage-channel 8ef3704c5b

Channel rules: who can read and post, parent channel, keeping, owner ... 3a5996cc85

"Hantera kanalen" gets the rules: open, closed or secret (a stricter
choice asks once more and says what changes), replies to the parent
channel, anonymous posts, secret members; who may post (a person or a
channel's members, empty for everyone); the parent channel; how many
days posts and commented posts are kept; and handing the channel over,
after a warning that you can't change it afterwards. Names are looked up
as typed; none or several matches are said plainly.

set-expire is left out: Protocol A marks it experimental and lyskomd
doesn't act on it.

Refs #349

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Manage a channel: the message stays above the status after a change ... ab539efc74

open_conf clears the status line on purpose, so the message for a
change was gone before it showed. A change now reloads the view itself.

Refs #348

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Merge issue-348-manage-channel into issue-349-channel-rules f3b8620c35

Channel members: list, invite, remove; accept or decline an invitation ... 1870153b7c

Under a channel's status, "Visa medlemmarna (N)" lists them (invited and
passive ones tagged). Its supervisor invites a person by name and
removes members, asked once more. An invited person sees "Du är inbjuden
hit" with Tacka ja / Tacka nej where the channel's status is, and going
to the channel shows that choice rather than its posts.

Supervisors invite: lyskomd's "Add members by invitation" (on by
default) makes any add by a non-admin an invitation. Adding directly is
for admin mode (#355).

Refs #350

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Test: box the members test's future (clippy large_futures) ... 028cc1e6dd

Refs #350

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Moderation: remove a post from a channel, delete a post (WIP) 527ae22d55

Merge main into issue-351-moderation ... a2c8e56329

# Conflicts:
#	crates/devseed/src/main.rs

Test: moderation in the browser; kom.ts posts as someone else ... 3406965847

Refs #351

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Test: a member opens the channel's status through Om kanalen ... 53cee2cc35

Refs #350

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Merge issue-350-members into issue-351-moderation 25d32ef4e7

My account: change password, my note on the door, my sessions ... cd050f2f8a

On my own profile, "Mitt konto": change my password (the old one, the
new one twice; wrong or different ones are said), put up or take down
my note on the door, and see where I'm logged in, logging any other
session out.

A changed password is the one used to log in again after a dropped
connection (the session's copy is now shared and updatable), and a kept
login (D-032, D-045) stores the new one.

Refs #352

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Admin mode for accounts with the wheel or admin bit ... dcb2409081

Settings gets "Administration" for accounts that may administer the
server: admin mode on and off (enable 255 / 0), and the way to an
Administration screen that #354-#356 fill. While it's on, the top bar
says so in red with a button to turn it off, and every channel can be
managed. A dropped connection or a logout turns it off, as the server
forgets it; the events list says so.

lyskomd accepts anyone's enable and grants nothing, so the client checks
the privilege bits first rather than show admin mode that isn't.

Refs #353

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Admin: login message, server channels, server FAQ, message to everyone ... 973e8e5d3e

The Administration screen (in admin mode) gets: the login message, with
subject and text, written as elisp writes it (to the old message's
recipients, else the news channel) and set with set-motd-of-lyskom; the
server's four channels (news, notes, presentations of channels and of
people); the server's FAQs; and a message to every logged-in session,
asked once more (#342 took that from the side column).

Everyone now sees the login message under the top bar when they log in,
until they close it; a new message shows again.

Refs #354

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Test: log in again rather than reload ... 5e3c62acb0

Refs #354

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Admin: other people's privileges, passwords and sessions ... b74c34628a

The Administration screen gets "Personer": look a person up, set their
privileges (each said in plain words; taking away your own wheel or
admin asks once more), and give them a new password with your own. And
"Sessioner": everyone logged in, with client and host, any of them
logged out after a second tap. In admin mode, a channel's members list
can add someone directly instead of inviting them.

Refs #355

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Test: quote the title with an apostrophe ... ba54840019

Refs #355

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Test: wait for the admin screen to reload before typing on ... 112c61f5fa

Refs #354

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJW2ocwLunyaLiUwCBHEP8

Merge issue-354-server-messages into issue-355-admin-users 2772ad1bad

littlefox commented 2026-10-28 02:25:59 +00:00

Author

Owner

Copy link

Merged into main as part of #377 (the stack's top branch, which contains this one); main green (run #696). Closing.

Merged into main as part of #377 (the stack's top branch, which contains this one); main green (run #696). Closing.

littlefox closed this pull request 2026-10-28 02:26:00 +00:00

littlefox referenced this pull request 2026-10-28 02:26:04 +00:00

Admin: privileges, passwords and sessions of other users #355

Some checks failed

Hide checks

perf / perf (pull_request) Has been skipped

Details

ci / plan (push) Successful in 1m50s

Details

ci / e2e (desktop) (push) Failing after 21m12s

Details

ci / check (push) Successful in 10m36s

Details

ci / desktop (push) Successful in 21m6s

Details

ci / e2e (android) (push) Successful in 24m16s

Details

ci / e2e (iphone) (push) Successful in 24m55s

Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

area/ci

Forgejo Actions, runner, tests

  

area/desktop

Desktop build

  

area/packaging

Arch, Debian, Fedora, NixOS packages

  

area/protocol

kom-proto, wire format, charset

  

area/reading

Unread tracking, reading order, review

  

area/ui

Dioxus app, layout, interaction

  

area/web

Web build and relay

  

area/writing

Composing and sending texts

  

kind/bug

Something is broken

  

kind/feature

New functionality

  

kind/infra

Tooling, tests, CI, dev environment

  

kind/request

requests for features or changes from users

  

needs/user

Waiting for a decision or action from littlefox

  

parked

Kept for reference; no work planned until the user says so

  

perf

Run the perf workflow and its budgets on this pull request (#287)

  

security

Security-relevant

  

upstream

A proposal for Protocol A or lyskomd, for the LysKOM development group

No labels

area/ci

area/desktop

area/packaging

area/protocol

area/reading

area/ui

area/web

area/writing

kind/bug

kind/feature

kind/infra

kind/request

needs/user

parked

perf

security

upstream

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

littlefox/neokom!376

No description provided.