Read-only admin access to /whitelist.html (investor seat)
AetherCut v1.7.87 shipped on with 5 updates to the private, browser-based video editor. Everything here is already included in the latest version. AetherCut edits on your own device, so your footage never has to be uploaded to a server.
What's new in v1.7.87
- New auth split: verify_admin() accepts owner OR read-only sessions; verify_admin_write() rejects readonly users with 403 — used on every POST/DELETE mutation endpoint across admin.py, social.py, social_stats.py, launch_playbook.py
- New CRUD endpoints GET/POST/DELETE /api/admin/readonly-users — owner-only; persists to db.admin_readonly_emails. Bootstrap path via ADMIN_READONLY_EMAILS env var
- /admin/whoami now returns a `level` field ('owner' or 'readonly') so the UI can adapt
- whitelist.html: new owner-only card to add/remove read-only emails; applyLevelGating() removes owner-only cards from the DOM (not just hidden) and disables every mutation button for readonly users, with a yellow READ-ONLY banner up top
- Verified live: curl owner POST 200, owner GET 200, anonymous GET 403; all 72 regression suites pass
Try it
AetherCut is free to start and runs in Chrome, Edge, Safari and Firefox, with no install and no account needed to edit. Open the editor or see how it works.