Skip to content

2.3.0

Choose a tag to compare

@iPmartNetwork iPmartNetwork released this 08 May 22:52
· 53 commits to master since this release
ab8e358

Added

  • Added multi-level admin roles: owner, admin, moderator, support, and user.
  • Added permission checks for sensitive admin API routes.
  • Added admin password re-authentication before role changes, bans, password resets, session revokes, destructive deletes, and backup operations.
  • Added session IP address and user-agent tracking for new logins.
  • Added audit log IP address, user-agent, and success/failure tracking.
  • Added active session device/network details in the admin user detail drawer.

Changed

  • Promoted ADMIN_USERNAMES bootstrap accounts to owner-level access.
  • Hardened Admin Panel actions so the UI sends password confirmation with sensitive requests.
  • Updated Admin Panel role filters and role selectors for the expanded role model.

Fixed

  • Fixed a remaining Admin Panel 500 risk by including ACCOUNT_CREATION in the admin settings route dependencies