From e0fd8ea9bbd7b216ce1501691a1201a140454660 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Antti=20M=C3=A4ki?= <antti@anttimaki.com>
Date: Fri, 12 Dec 2025 10:44:35 +0200
Subject: [PATCH 1/2] Allow moderators to manage packages

- Show "Manage Package" button on package page
- Allow access to package "edit" page
---
 .../app/p/components/PackageListing/ManagementTools.tsx      | 2 +-
 apps/cyberstorm-remix/app/p/packageEdit.tsx                  | 5 ++++-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/apps/cyberstorm-remix/app/p/components/PackageListing/ManagementTools.tsx b/apps/cyberstorm-remix/app/p/components/PackageListing/ManagementTools.tsx
index ce0fa153f..25868a0d6 100644
--- a/apps/cyberstorm-remix/app/p/components/PackageListing/ManagementTools.tsx
+++ b/apps/cyberstorm-remix/app/p/components/PackageListing/ManagementTools.tsx
@@ -81,7 +81,7 @@ export function ManagementTools({
       )}
 
       {/* Manage package */}
-      {perms.can_manage && (
+      {(perms.can_manage || perms.can_moderate) && (
         <div className="package-listing-management-tools__island">
           <NewButton
             csSize="small"
diff --git a/apps/cyberstorm-remix/app/p/packageEdit.tsx b/apps/cyberstorm-remix/app/p/packageEdit.tsx
index d28203b68..998237a51 100644
--- a/apps/cyberstorm-remix/app/p/packageEdit.tsx
+++ b/apps/cyberstorm-remix/app/p/packageEdit.tsx
@@ -92,7 +92,10 @@ export async function clientLoader({ params }: LoaderFunctionArgs) {
         params.packageId
       );
 
-      if (!permissions?.permissions.can_manage) {
+      if (
+        !permissions?.permissions.can_manage &&
+        !permissions?.permissions.can_moderate
+      ) {
         throw new Response("Unauthorized", { status: 403 });
       }
 

From 4ce089688c7167b8d92130e812227b83a95d0895 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Antti=20M=C3=A4ki?= <antti@anttimaki.com>
Date: Fri, 12 Dec 2025 10:46:56 +0200
Subject: [PATCH 2/2] Show 401 for unauthenticated users trying to access
 package edit page

---
 apps/cyberstorm-remix/app/p/packageEdit.tsx | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/apps/cyberstorm-remix/app/p/packageEdit.tsx b/apps/cyberstorm-remix/app/p/packageEdit.tsx
index 998237a51..78d98bd5f 100644
--- a/apps/cyberstorm-remix/app/p/packageEdit.tsx
+++ b/apps/cyberstorm-remix/app/p/packageEdit.tsx
@@ -92,9 +92,11 @@ export async function clientLoader({ params }: LoaderFunctionArgs) {
         params.packageId
       );
 
-      if (
-        !permissions?.permissions.can_manage &&
-        !permissions?.permissions.can_moderate
+      if (!permissions) {
+        throw new Response("Unauthenticated", { status: 401 });
+      } else if (
+        !permissions.permissions.can_manage &&
+        !permissions.permissions.can_moderate
       ) {
         throw new Response("Unauthorized", { status: 403 });
       }