mirror of
https://github.com/sol1/rustguac.git
synced 2026-09-10 09:35:45 +00:00
c750053856
Connections - Clicking an active session card used to POST /connect for entries with an address_book_entry, which minted a new session every time. Confirmed in the log: a web-session owner clicked back to their active card after a shadow join and got two duplicate sessions. - Now the click just opens s.client_url — which attaches to the existing session. Dormant VDI containers below still need /connect (no live session to attach to), so that branch is untouched. Tokens page - Operator/viewer roles saw the Sessions nav link on the Tokens page (every other page correctly hid it for level < 3). Clicking it redirected straight back out because sessions.html rejects level < 3. - Added the same hide-on-level-<3 logic as the other pages; also reveal the Reports link for level >= 3 in the same pass.