From d7354556c3dc8dfb72b680de73ce1d30a239f7a0 Mon Sep 17 00:00:00 2001
From: padreug <padreug@aiolabs.dev>
Date: Fri, 7 Nov 2025 18:05:30 +0100
Subject: [PATCH] Adds admin permissions management page

Implements an admin permissions management page.

This change allows superusers to manage permissions directly from the castle interface, providing a more streamlined experience for administrative tasks.
---
 templates/castle/index.html |  5 ++++-
 views.py                    | 14 ++++++++++++++
 2 files changed, 18 insertions(+), 1 deletion(-)

diff --git a/templates/castle/index.html b/templates/castle/index.html
index b5d6a01..c907303 100644
--- a/templates/castle/index.html
+++ b/templates/castle/index.html
@@ -16,10 +16,13 @@
             <h5 class="q-my-none">🏰 Castle Accounting</h5>
             <p class="q-mb-none">Track expenses, receivables, and balances for the collective</p>
           </div>
-          <div class="col-auto">
+          <div class="col-auto q-gutter-xs">
             <q-btn v-if="!isSuperUser" flat round icon="account_balance_wallet" @click="showUserWalletDialog">
               <q-tooltip>Configure Your Wallet</q-tooltip>
             </q-btn>
+            <q-btn v-if="isSuperUser" flat round icon="admin_panel_settings" :href="'/castle/permissions'">
+              <q-tooltip>Manage Permissions (Admin)</q-tooltip>
+            </q-btn>
             <q-btn v-if="isSuperUser" flat round icon="settings" @click="showSettingsDialog">
               <q-tooltip>Castle Settings (Super User Only)</q-tooltip>
             </q-btn>
diff --git a/views.py b/views.py
index 2de9357..70dceea 100644
--- a/views.py
+++ b/views.py
@@ -17,3 +17,17 @@ async def index(
     return template_renderer(["castle/templates"]).TemplateResponse(
         request, "castle/index.html", {"user": user.json()}
     )
+
+
+@castle_generic_router.get(
+    "/permissions",
+    description="Permission management page",
+    response_class=HTMLResponse,
+)
+async def permissions(
+    request: Request,
+    user: User = Depends(check_user_exists),
+):
+    return template_renderer(["castle/templates"]).TemplateResponse(
+        request, "castle/permissions.html", {"user": user.json()}
+    )