← URAI Admin
Security-first admin operations.
URAI Admin is designed around protected routes, hardened server APIs, explicit roles, and auditability by default.
Session-cookie protected admin routes
Role-aware access checks for owner, admin, and viewer
Active admin user verification before privileged access
Deny-by-default Firestore security rules
Server-side Admin SDK writes for protected mutations
Audit logs for sensitive admin actions
Admin writes stay server-side.
Client-side admin users can read only what their role allows. Sensitive mutations go through protected API routes backed by Firebase Admin SDK and audit logging.