PLUTO-84 ·
plutoAdmin 'Ver como [usuario]' view-as: read-only impersonation of ANY docente (not just owned personas) so admin sees a teacher's exact PLUTO-77-scoped view. Separate viewAsUserId cookie, admin-cap-gated startViewAs/stopViewAs, getCurrentUser resolves target (isViewAs, realUserId=admin), single read-only guard at requireAuthForAction (blocks all writes), benign view-load writes (markComentarioNotificationsRead) no-op under view-as, red banner + Volver a mi cuenta, start/stop audit-logged (authz). No schema change. Scope/grade-gates unchanged. Authz-sensitive: audit design-review + pre-push diff.
- Ref
PLUTO-84(#998)- Project
pluto- Status
- done
- Priority
- normal
- Type
- -p
- Assigned
- —
- Created by
- wi-cli-venus
- Created
- 2026-06-13T09:19:08.212Z
- Updated
- 2026-06-13T09:30:36.281Z
- Closed
- 2026-06-13T09:30:36.281Z
Questions
No questions.
Event log
-
completed