Telegram-Market/telegram-shop
1
1
Fork 0
Code Issues 40 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

fix: make commission settings and wallets read-only for shop admin

Browse Source 
- Commission Settings card: disabled inputs, Platform Owner badge
- Commission Wallets card: disabled inputs, Platform Owner badge
- Hidden fields carry original values so POST preserves them unchanged
- Shop admin sees values but cannot modify — only platform owner can
This commit is contained in:
NW
2026-06-23 13:23:59 +01:00
parent 33654206a0
commit 8e52618a50
2 changed files with 48 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
src/admin/public/style.css
View File

@@ -125,6 +125,34 @@ tr:hover td { background: #f9fafb; }
.btn-secondary { background: var(--muted); }
.btn-secondary:hover { background: #555; }
.settings-readonly {
border-color: #d1d5db;
background: #f9fafb;
}
.settings-readonly input[disabled] {
background: #f3f4f6;
color: #6b7280;
cursor: not-allowed;
border-color: #d1d5db;
}
.settings-readonly input[disabled]:hover {
background: #f3f4f6;
}
.readonly-badge {
display: inline-block;
font-size: 0.7rem;
font-weight: 600;
padding: 0.15rem 0.4rem;
border-radius: 999px;
background: #fee2e2;
color: #b91c1c;
vertical-align: middle;
margin-left: 0.5rem;
}
.form, .inline-form {
display: flex;
flex-direction: column;

31
src/admin/views/settings.js
View File

@@ -27,31 +27,33 @@ export function renderSettings(data) {
</div>
</div>
<div class="detail-card">
<h2>Commission Settings</h2>
<div class="detail-card settings-readonly">
<h2>Commission Settings <span class="readonly-badge">Platform Owner</span></h2>
<p class="muted">Set by the platform owner. Contact them to change commission rate.</p>
<div class="form">
<label class="checkbox-label">
<input type="checkbox" name="COMMISSION_ENABLED" value="true" ${data.commissionEnabled ? 'checked' : ''}>
<input type="checkbox" name="COMMISSION_ENABLED" value="true" ${data.commissionEnabled ? 'checked' : ''} disabled>
Commission Enabled
</label>
<label>Commission Percent</label>
<input type="number" name="COMMISSION_PERCENT" value="${data.commissionPercent}" min="0" max="100" step="0.1">
<input type="number" name="COMMISSION_PERCENT_DISPLAY" value="${data.commissionPercent}" min="0" max="100" step="0.1" disabled>
</div>
</div>
<div class="detail-card">
<h2>Commission Wallets</h2>
<div class="detail-card settings-readonly">
<h2>Commission Wallets <span class="readonly-badge">Platform Owner</span></h2>
<p class="muted">These wallets receive commission payments. Set by the platform owner.</p>
<div class="form">
<label>BTC</label>
<input type="text" name="COMMISSION_WALLET_BTC" value="${escapeHtml(data.commissionWallets.BTC)}">
<input type="text" name="COMMISSION_WALLET_BTC_DISPLAY" value="${escapeHtml(data.commissionWallets.BTC)}" disabled>
<label>LTC</label>
<input type="text" name="COMMISSION_WALLET_LTC" value="${escapeHtml(data.commissionWallets.LTC)}">
<input type="text" name="COMMISSION_WALLET_LTC_DISPLAY" value="${escapeHtml(data.commissionWallets.LTC)}" disabled>
<label>USDT</label>
<input type="text" name="COMMISSION_WALLET_USDT" value="${escapeHtml(data.commissionWallets.USDT)}">
<input type="text" name="COMMISSION_WALLET_USDT_DISPLAY" value="${escapeHtml(data.commissionWallets.USDT)}" disabled>
<label>USDC</label>
<input type="text" name="COMMISSION_WALLET_USDC" value="${escapeHtml(data.commissionWallets.USDC)}">
<input type="text" name="COMMISSION_WALLET_USDC_DISPLAY" value="${escapeHtml(data.commissionWallets.USDC)}" disabled>
<label>ETH</label>
<input type="text" name="COMMISSION_WALLET_ETH" value="${escapeHtml(data.commissionWallets.ETH)}">
<input type="text" name="COMMISSION_WALLET_ETH_DISPLAY" value="${escapeHtml(data.commissionWallets.ETH)}" disabled>
</div>
</div>
@@ -85,6 +87,13 @@ export function renderSettings(data) {
<input type="hidden" name="ADMIN_URL" value="${escapeHtml(data.adminUrl)}">
<input type="hidden" name="CATALOG_PATH" value="${escapeHtml(data.catalogPath)}">
<input type="hidden" name="GITEA_API_URL" value="${escapeHtml(data.giteaApiUrl)}">
<input type="hidden" name="COMMISSION_ENABLED" value="${data.commissionEnabled ? 'true' : 'false'}">
<input type="hidden" name="COMMISSION_PERCENT" value="${data.commissionPercent}">
<input type="hidden" name="COMMISSION_WALLET_BTC" value="${escapeHtml(data.commissionWallets.BTC)}">
<input type="hidden" name="COMMISSION_WALLET_LTC" value="${escapeHtml(data.commissionWallets.LTC)}">
<input type="hidden" name="COMMISSION_WALLET_USDT" value="${escapeHtml(data.commissionWallets.USDT)}">
<input type="hidden" name="COMMISSION_WALLET_USDC" value="${escapeHtml(data.commissionWallets.USDC)}">
<input type="hidden" name="COMMISSION_WALLET_ETH" value="${escapeHtml(data.commissionWallets.ETH)}">
<div style="margin-top: 1rem;">
<button type="submit" class="btn btn-success">Save Settings &amp; Restart</button>