Admin Panel
The /admin dashboard — everything admins can do.
The admin panel lives at /admin. Logged-in admins see a new link in the header; everyone else gets redirected.
Becoming an admin
In Supabase → Table Editor → users → set both is_admin = true and role = 'admin' on your row. See Authentication for the full note on why there are two fields.
Dashboard overview
The landing page shows at-a-glance stats: submissions this week, pending approvals, top categories, revenue, etc. Charts are powered by Recharts.
Pages
| Route | What you manage |
|---|---|
/admin | Overview dashboard with charts |
/admin/projects | Approve / reject / edit submissions |
/admin/categories | Categories and spheres (drag-and-drop) |
/admin/users | User roles, admin flag, bans |
/admin/sponsors | Sponsor placements |
/admin/promotions | Paid promo placements |
/admin/changelog | Post updates that appear on /changelog |
/admin/theme | Customize site theme (applies to everyone) |
/admin/settings | Global site settings |
/admin/analytics | Enhanced analytics view (traffic, countries, …) |
Projects
Filter by status (pending / live / rejected), search by name, bulk-approve. Clicking a row opens the full project detail with edit fields.
Also supports CSV import — dump existing listings from a spreadsheet, map columns, import in one go.
Categories (drag-and-drop)
Uses @dnd-kit/*. Drag categories to reorder within a sphere or move them between spheres. Save auto-persists the new order.
Promotions & sponsors
Approve/reject purchases, set start dates, manually extend or revoke placements.
Site settings
DB-backed global knobs (separate from the code-based config/ files). Good for things you want a non-developer admin to flip without deploying.
Access control
Admin routes are protected both client-side and server-side:
- Server components call
requireAuth()andisAdmin()→ redirect if not admin - RLS policies on sensitive tables use
role = 'admin' - Middleware does not enforce admin — individual pages do
See also
- Authentication — how to grant admin rights
- Admin Routes — the API behind the panel