Developer Builds Admin Panel Package to Fill Gap Left by Prisma Studio

·1 views

A developer has released a lightweight npm package that adds a proper admin panel layer on top of Prisma-based Express applications. Unlike Prisma Studio, which is a database viewer with no concept of user roles or permissions, the package enforces a strict pipeline of authentication, permission checks, tenant scoping, and validation before any database mutation runs. The tool mounts a React UI at /admin and a protected API under /admin/api/*, keeping admin users entirely separate from application end users to avoid accidental data mixing. Multi-tenant scoping is enforced across all operations — including lists, reads, updates, and relation dropdowns — with a dedicated test suite verifying that one tenant cannot access another's records. An optional audit event system emits mutation metadata without imposing its own storage schema, leaving data ownership with the developer.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Nodum.md Launches as Open-Source Alternative to Obsidian with Built-In AI

A developer has announced Nodum.md, an open-source knowledge management tool designed as an alternative to the popular note-taking app Obsidian. The project is publicly available on GitHub under the repository nodummd/nodum. Unlike Obsidian, Nodum aims to differentiate itself by integrating artificial intelligence features alongside standard note-taking capabilities. The tool is positioned for users seeking an open and extensible platform for personal knowledge management. The project also has a presence on LinkedIn, suggesting an intent to build a community and organization around its development.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Finds Four Security Flaws in His Own Live Rails App During Routine Audit

A developer building RepBoard, a freelancer reputation platform, discovered four security vulnerabilities in his own deployed app after applying an audit process he learned from unrelated tutorials. The most critical flaw allowed any logged-in client to secretly add a hidden input field in the account settings form and grant themselves freelancer status, exploiting an overly permissive Devise parameter list. A separate vulnerability let clients submit reviews targeting other clients or even themselves, since the recipient's ID was pulled from an unvalidated hidden form field. The developer fixed the role-escalation bug by removing the sensitive parameter from the permitted list, and addressed the review flaw by moving authorization logic into model-level validations. The incident highlighted the distinction between validation and authorization, and revealed that his seed data had been silently generating invalid records all along.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Liquidity Pool Beats Grid Bot With Nearly Double the APY in Same Price Range

A trader tested two passive income strategies — a grid bot on Pionex and a concentrated liquidity position on VFat — using the identical WETH/USDC price range of 1630–2000 over the same time period. The grid bot delivered 11.83% APY while the liquidity pool returned 21.63% APY, nearly twice the yield. The core difference is how each strategy earns: the grid bot only profits when the price crosses predefined steps, whereas the LP position collects a fee from every swap executed within the set range. Exchange fees further erode grid bot returns, since each round trip costs 0.10%, meaning the price must move 0.20% per step just to net that amount. The author notes grid bots can still outperform in high-volatility, low-volume conditions, but concludes that liquidity pools are more effective when a price range holds steady with consistent trading volume.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Path Protocol's Theme Workshop lets anyone build and publish custom minigolf courses

Path Protocol is a free, open-source browser-based precision minigolf game featuring 100 levels and an MIT license. Its built-in Theme Workshop allows users to design custom themes and courses without any prior game development experience. The editor operates on a grid-based logical world and offers tools to place obstacles, reshape objects, set arena boundaries, and swap visual and audio assets. All submitted levels must pass schema validation and gameplay checks before going public, ensuring consistent and safe community content. Completed courses can be published as public themes and shared via a direct link with the broader community.

0 comments Read more at DEV Community