spp_branding_kit: format controllers after import reorder

Author: jeremi

.gitignore

@@ -76,3 +76,6 @@ docs/_build/
 #ruff
 .ruff_cache
 .aider*
+
+# Local release planning files (ignored)
+.release/

spp_branding_kit/controllers/main.py

@@ -8,6 +8,33 @@
 from odoo import http
 from odoo.http import request
 
+from odoo.addons.portal.controllers.web import Home
+
+
+class OpenSPPHome(Home):
+    """Restrict debug mode to administrators when enabled via parameter."""
+
+    @http.route()
+    def web_client(self, s_action=None, **kw):
+        # Enforce optional debug restriction before rendering
+        try:
+            config_parameter = request.env["ir.config_parameter"].sudo()
+            debug_admin_only = config_parameter.get_param("openspp.debug.admin_only", "True") == "True"
+        except Exception:  # pragma: no cover - defensive
+            debug_admin_only = True
+
+        # Detect debug flag from kwargs or query string
+        has_debug = bool(kw.get("debug")) or ("debug" in (request.httprequest.args or {}))
+        if debug_admin_only and has_debug:
+            uid = request.session.uid
+            # If not logged in or not admin, strip debug and redirect
+            if not uid or not request.env.user._is_admin():
+                kw.pop("debug", None)
+                args = {k: v for k, v in request.httprequest.args.items() if k != "debug"}
+                return request.redirect("/web", query=args)
+
+        return super().web_client(s_action, **kw)
+
 
 class OpenSPPBrandingController(http.Controller):
     """Custom routes for OpenSPP branding"""