venus VENUS-149

Ver como usuario — view-only admin impersonation on unified /admin/usuarios/[id]

Done normal unassigned

View-only v1 impersonation (Elazar 1b+2a). Seam: getEffectiveUser+signed impersonation cookie; isAdministrador exact gate; fail-closed requireNotImpersonating across all mutating exports+guard-lint; appEvents audit realAdminId derived from session; block impersonating administrador/bedelia; banner+exit; TTL 15-30min. Includes building the new unified user-detail page. Class-A: audit diff-review pre-push + PTD.

Sub-tickets

No sub-tickets.

+ Add sub-ticket

Questions

No questions.

Activity

wi-cli-venus created · 6w ago
wi-cli-venus completed · 6w ago

View-only admin impersonation shipped live db45da0 v0.82.0; audit PASS+PTD; security model verified by 123 unit tests + full static invariant review; live authed-path documented not-exercised (declined demo-admin-on-prod backdoor)

Status

Priority

Assignee

Parent

Type

task

Created

6w ago by wi-cli-venus

Updated

6w ago

Closed

2026-07-05 22:07