coopcloud_code/cm50_app
0
0
Fork 0
Code Issues 21 Pull requests Projects Releases 1 Packages Wiki Activity Actions

Admin pane: richer authenticated tables for cm50_app (directory, full programme) #43

New issue
Closed
opened 2026-06-24 15:44:25 +00:00 by casper-stevens · 1 comment
casper-stevens commented 2026-06-24 15:44:25 +00:00
Member
Copy link

Follow-up to #3.

The cm50_app admin pane (in hero_components, ?service=cm50_app) currently round-trips only public, no-arg methods — the Programme tab uses news_pinned, and the default Docs/Playground tabs enumerate every method across all five domains. That satisfies #3's done-criteria.

But the genuinely useful admin tables can't be shown yet:

  • CRUD *_list* methods are deliberately disabled server-side (return forbidden).
  • The rich reads (participants_snapshot, program_snapshot, community_snapshot) require a session token that the generic no-arg <Table> markup can't supply.

To surface the participant directory / full programme in the admin pane, pick one:

  1. Session-aware table widget — extend the hero_components markup vocabulary so a <Table> can attach an admin session token to the call.
  2. Unauthenticated admin-only read method on cm50_app (gated by the admin socket / claims) returning the snapshot data.

Tier: P2.

Follow-up to #3. The cm50_app admin pane (in `hero_components`, `?service=cm50_app`) currently round-trips only **public, no-arg** methods — the Programme tab uses `news_pinned`, and the default Docs/Playground tabs enumerate every method across all five domains. That satisfies #3's done-criteria. But the genuinely useful admin tables can't be shown yet: - CRUD `*_list*` methods are deliberately **disabled** server-side (return `forbidden`). - The rich reads (`participants_snapshot`, `program_snapshot`, `community_snapshot`) require a **session token** that the generic no-arg `<Table>` markup can't supply. To surface the participant directory / full programme in the admin pane, pick one: 1. **Session-aware table widget** — extend the hero_components markup vocabulary so a `<Table>` can attach an admin session token to the call. 2. **Unauthenticated admin-only read method** on cm50_app (gated by the admin socket / claims) returning the snapshot data. Tier: **P2**.
casper-stevens commented 2026-06-24 16:07:48 +00:00
Author
Member
Copy link

Duplicate of #44 (identical body, submitted ~25s earlier by accident). Closing in favour of #44, which is the one tracked on the Priority Board (#41). Discussion/work continues on #44.

Duplicate of #44 (identical body, submitted ~25s earlier by accident). Closing in favour of #44, which is the one tracked on the Priority Board (#41). Discussion/work continues on #44.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
development
development_ng
rename-cm50-app
development_timur
development_poc
v0.2.0
v0.1.0
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
coopcloud_code/cm50_app#43
No description provided.