LogoThreatmatic
Admin

Admin

Platform-wide administration — users, feature flags, and software versions.

The Admin panel (/admin) provides platform-level management capabilities. Access is restricted to users with the admin role — any other role receives a 403 Forbidden response.

Admin role required

The admin layout checks session.user.role === "admin" on every request. Non-admin users are redirected to a forbidden page and cannot access any /admin/* routes.

Sub-sections

Access Control

Admin access is enforced at the layout level (apps/console/src/app/(app)/admin/layout.tsx). The session is validated server-side on every navigation — client-side route guards alone are not sufficient.

How is this guide?

Last updated on

On this page