48 lines
2.8 KiB
Markdown
48 lines
2.8 KiB
Markdown
---
|
|
type: User Story
|
|
title: Manage users as an administrator
|
|
description: Authorized operators search users and maintain their names, linked accounts, primaries, and Discord nicknames.
|
|
tags: [admin, users, minecraft, discord]
|
|
timestamp: 2026-08-02T14:12:43Z
|
|
story_id: US-013
|
|
status: verified
|
|
---
|
|
|
|
# User Story
|
|
|
|
As an administrator, I want to manage a user's identity and Minecraft accounts, so that support issues can be resolved without direct database access.
|
|
|
|
# Acceptance Criteria
|
|
|
|
- [x] Administrators can search by preferred name, Discord username or ID, Minecraft username, or UUID.
|
|
- [x] Search results show onboarding state, primary username, and active account count.
|
|
- [x] A user detail view shows Discord display name, username, guild nickname, immutable ID, active accounts, groups, recent events, and recent IP observations.
|
|
- [x] Administrators can update the preferred name and synchronize Discord.
|
|
- [x] Administrators can add Mojang-verified accounts or explicitly override an unverified username.
|
|
- [x] Administrators can remove an account only after a visible confirmation step.
|
|
- [x] Removing a primary account selects a replacement or falls back to the preferred-name nickname.
|
|
- [x] Administrators can set a new primary account and automatically update Discord.
|
|
- [x] Every action rechecks role and account ownership and records the acting administrator.
|
|
- [x] Discord failures do not falsely persist the requested name, primary, or removal change.
|
|
- [x] Each row in the administrator user registry shows the user's effective group in an accessible dropdown.
|
|
- [x] Selecting a group immediately applies the assignment; selecting `everyone` removes the explicit assignment.
|
|
- [x] Group changes preserve the active user search and show accessible success or error feedback.
|
|
- [x] Registry assignment changes revalidate administrator authorization, user existence, and group existence, and audit the previous and new effective groups.
|
|
|
|
# Implementation
|
|
|
|
- [`apps/web/src/app/admin/(console)/users/page.tsx`](../apps/web/src/app/admin/%28console%29/users/page.tsx)
|
|
- [`apps/web/src/app/admin/(console)/users/[userId]/page.tsx`](../apps/web/src/app/admin/%28console%29/users/%5BuserId%5D/page.tsx)
|
|
- [`apps/web/src/app/admin/(console)/users/actions.ts`](../apps/web/src/app/admin/%28console%29/users/actions.ts)
|
|
- [`apps/web/src/components/user-group-select.tsx`](../apps/web/src/components/user-group-select.tsx)
|
|
|
|
# Validation
|
|
|
|
Nickname fallback behavior is tested in [`packages/minecraft/test/minecraft.test.ts`](../packages/minecraft/test/minecraft.test.ts). Privileged routes pass TypeScript, lint, Semgrep, and production build checks.
|
|
|
|
# Related Stories
|
|
|
|
- [Administrator SSO](us-011-admin-sso.md)
|
|
- [Synchronize Discord nicknames](us-006-discord-nickname.md)
|
|
- [Control Minecraft admission with groups](us-017-group-access.md)
|