From 30284ce3187dfbdc4ffa748c6db66373de6aa4c3 Mon Sep 17 00:00:00 2001
From: lladdy <randallboland@bigpond.com>
Date: Mon, 8 Nov 2021 22:02:34 +1030
Subject: [PATCH 1/2] Require superuser status for bot file downloads and admin
 links view.

---
 aiarena/frontend/templates/base.html | 2 +-
 aiarena/frontend/templates/bot.html  | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/aiarena/frontend/templates/base.html b/aiarena/frontend/templates/base.html
index f4ec3b9f..4939f858 100644
--- a/aiarena/frontend/templates/base.html
+++ b/aiarena/frontend/templates/base.html
@@ -120,7 +120,7 @@ <h3>user</h3>
                     </ul>
                 </li>
 
-                {% if user.is_staff %}
+                {% if user.is_superuser %}
                     <li>
                         <div id="sidebar-header">
                             <em class="material-icons">bug_report</em>
diff --git a/aiarena/frontend/templates/bot.html b/aiarena/frontend/templates/bot.html
index 9aff0f6a..df866e86 100644
--- a/aiarena/frontend/templates/bot.html
+++ b/aiarena/frontend/templates/bot.html
@@ -42,7 +42,7 @@
                 <tr>
                     <td><strong>Bot Zip</strong></td>
                     <td>
-                        {% if request.user == bot.user or bot.bot_zip_publicly_downloadable or request.user.is_staff %}
+                        {% if request.user == bot.user or bot.bot_zip_publicly_downloadable or request.user.is_superuser %}
                             <a href="{{ bot.bot_zip.url }}">Download</a>
                         {% else %}
                             --
@@ -53,7 +53,7 @@
                     <td><strong>Bot data</strong></td>
                     <td>
                         {% if bot.bot_data %} {# Done with two if statements because templates don't allow parentheses #}
-                            {% if request.user == bot.user or bot.bot_data_publicly_downloadable or request.user.is_staff %}
+                            {% if request.user == bot.user or bot.bot_data_publicly_downloadable or request.user.is_superuser %}
                                 <a href="{{ bot.bot_data.url }}">Download</a>
                             {% else %}
                                 --

From 2e332e3695b8aad9fa24260549be347fbfcff14f Mon Sep 17 00:00:00 2001
From: lladdy <randallboland@bigpond.com>
Date: Mon, 8 Nov 2021 22:18:08 +1030
Subject: [PATCH 2/2] Add private download warning for superusers

---
 aiarena/frontend/static/style.css   |  4 ++++
 aiarena/frontend/templates/bot.html | 12 ++++++++++++
 2 files changed, 16 insertions(+)

diff --git a/aiarena/frontend/static/style.css b/aiarena/frontend/static/style.css
index 41cd016c..915aaed9 100644
--- a/aiarena/frontend/static/style.css
+++ b/aiarena/frontend/static/style.css
@@ -1464,4 +1464,8 @@ input[type=text], input[type=password], input[type=email], input[type=number], i
   width: 84.5%;
   overflow: hidden;
   transition: max-height 0.2s ease-out
+}
+
+.private-download-warning {
+  background-color: rgba(255, 0, 0, 0.6);
 }
\ No newline at end of file
diff --git a/aiarena/frontend/templates/bot.html b/aiarena/frontend/templates/bot.html
index df866e86..2c4d57c7 100644
--- a/aiarena/frontend/templates/bot.html
+++ b/aiarena/frontend/templates/bot.html
@@ -41,7 +41,13 @@
                 </tr>
                 <tr>
                     <td><strong>Bot Zip</strong></td>
+                    {# Highlight red to warn super users if it's not a public download #}
+                    {% if request.user.is_superuser and not request.user == bot.user and not bot.bot_zip_publicly_downloadable %}
+                    <td class="private-download-warning">
+                    Warning: Private download!
+                    {% else %}
                     <td>
+                    {% endif %}
                         {% if request.user == bot.user or bot.bot_zip_publicly_downloadable or request.user.is_superuser %}
                             <a href="{{ bot.bot_zip.url }}">Download</a>
                         {% else %}
@@ -51,7 +57,13 @@
                 </tr>
                 <tr>
                     <td><strong>Bot data</strong></td>
+                    {# Highlight red to warn super users if it's not a public download #}
+                    {% if request.user.is_superuser and not request.user == bot.user and not bot.bot_data_publicly_downloadable %}
+                    <td class="private-download-warning">
+                    Warning: Private download!
+                    {% else %}
                     <td>
+                    {% endif %}
                         {% if bot.bot_data %} {# Done with two if statements because templates don't allow parentheses #}
                             {% if request.user == bot.user or bot.bot_data_publicly_downloadable or request.user.is_superuser %}
                                 <a href="{{ bot.bot_data.url }}">Download</a>