# Admin and Content Model

Status: local phase 2 and multi-user RBAC implemented on 1 September 2026. Production exposure remains blocked until PostgreSQL, R2, reverse-proxy security, MFA/VPN decision and staging acceptance are complete.

## Goal

The owner must edit Turkish, English, and Russian without opening code.

## Required modules

1. Dashboard: drafts, published items, missing translations, media warnings, recent changes.
2. Products: series, surface, size, burner layout, images, verified specifications, optional/standard flags.
3. Series stories: chapters, locale copy, visual, animation preset, callout anchors, selected products.
4. Homepage: hero playlist, story blocks, featured rules, section order and visibility.
5. Gallery: videos, posters, captions, order, publish dates.
6. Resources: catalogue versions, certificates, expiry dates, scope, download visibility.
7. Company story: factory steps, export countries, logistics claims, source/evidence field.
8. Translation centre: TR/EN/RU matrix, missing/stale status, preview, publish validation.
9. Users and audit log: protected system administrator, granular module/action permissions, account disable, session revocation, actor identity; before/after values and rollback remain planned.

## Content states

- Draft
- Needs verification
- Translation incomplete
- Approved
- Published
- Archived

Technical claims cannot reach Published without a source note or explicit approval.

## Safe animation presets

- mask-reveal
- slide-left/right/up
- typewriter-short
- kinetic-heading
- product-scale
- parallax-soft
- callout-line
- sticky-chapter

Each preset stores duration, delay, intensity, replay policy, and reduced-motion fallback within safe limits.

## Local implementation boundary

Implemented: one protected system administrator plus limited admin accounts, granular server-side RBAC, opaque database-backed sessions, persistent login throttling, forced temporary-password change, session revocation, independent mutation authorization, validation, actor-aware audit log, products with TR/EN/RU copy, series, Gallery, export markets, homepage section visibility/order, same-origin safe local upload and DB-driven public rendering.

Still planned: category editor, resources/certificates, detailed series chapter editor, company-story evidence workflow, global translation centre, before/after diff and rollback, PostgreSQL/R2 migration, production MFA/VPN decision and staging acceptance. None of these missing modules may be represented as production-complete.