feat(mod): CheckFlag converted into admin-only UI element (#2564)

Golbolco · web-flow · commit c3fb9ce9db33 · 2026-02-12T10:10:38.000-05:00
May or may not become a toggle for blacklisting/whitelisting people
later, still thinking of ways to fix our flagged user issue
diff --git a/data/constants.js b/data/constants.js
@@ -439,7 +439,6 @@ module.exports = {
     forceSignOut: true,
     viewIPs: true,
     viewAlts: true,
-    viewFlagged: true,
     clearSetupName: true,
     clearUserContent: true,
     clearFamilyContent: true,
@@ -517,7 +516,6 @@ module.exports = {
         "disableAllCensors",
         "kick",
         "announce",
-        "viewFlagged",
         "approvePending",
         "changeUsersName",
         "reviewPrivate",
@@ -582,7 +580,6 @@ module.exports = {
         "disableAllCensors",
         "kick",
         "announce",
-        "viewFlagged",
         "approvePending",
         "reviewPrivate",
         "approveRanked",
diff --git a/data/violations.js b/data/violations.js
@@ -19,7 +19,7 @@ const violationDefinitions = [
     id: "intolerance",
     name: "Intolerance",
     description:
-      "Any disrespectful behavior on the basis of group identity. Includes bigotry of any kind (racism, homophobia, transphobia, misogyny, etc.), bypassing slur filters, and genocide denial.",
+      "Any disrespectful behavior on the basis of group identity. Includes bigotry of any kind (racism, homophobia, transphobia, misogyny, etc.), bypassing slur filters, and genocide denial. Please note that one is not permitted to use slurs or bigoted phrases despite belonging to affected groups (i.e. reclamation).",
     offenses: [
       "1 day",
       "3 days",
@@ -35,7 +35,7 @@ const violationDefinitions = [
     id: "adult-content",
     name: "Adult Content",
     description:
-      'Graphic descriptions of adult behavior, including explicit sex acts, drug use, or descriptions of real violence. Restrict to a "13 and up" mindset.',
+      "Graphic or textual descriptions of adult behavior, including explicit sex acts, drug use, mentions of sites/content intended to shock or disturb, pornographic websites, or descriptions of real violence.",
     offenses: [
       "1 day",
       "3 days",
diff --git a/react_main/src/pages/Policy/Moderation/commands.js b/react_main/src/pages/Policy/Moderation/commands.js
@@ -590,28 +590,6 @@ export function useModCommands(argValues, commandRan, setResults) {
           .catch(errorAlert);
       },
     },
-    "Check Flagged": {
-      perm: "viewFlagged",
-      category: "User Management",
-      args: [
-        {
-          label: "User",
-          name: "userId",
-          type: "user_search",
-        },
-      ],
-      run: function () {
-        axios
-          .get(`/api/mod/flagged?userId=${argValues.userId}`)
-          .then((res) => {
-            if (res.data) alert("Flagged!");
-            else alert("Not flagged");
-
-            commandRan();
-          })
-          .catch(errorAlert);
-      },
-    },
     "Clear Setup Name": {
       perm: "clearSetupName",
       category: "Setup Management",
diff --git a/react_main/src/pages/Policy/Rules.jsx b/react_main/src/pages/Policy/Rules.jsx
@@ -55,7 +55,7 @@ export default function Rules() {
         UltiMafia Rules of Conduct
       </Typography>
       <Typography variant="body2" color="text.secondary" paragraph>
-        Last Updated: February 6, 2026
+        Last Updated: February 12, 2026
       </Typography>
 
       <Box sx={{ borderBottom: 1, borderColor: "divider"}}>
diff --git a/react_main/src/pages/User/Profile.jsx b/react_main/src/pages/User/Profile.jsx
@@ -115,6 +115,7 @@ export default function Profile() {
   const [nameHistory, setNameHistory] = useState([]);
   const [nameHistoryLoading, setNameHistoryLoading] = useState(false);
   const [joined, setJoined] = useState(null);
+  const [isFlagged, setIsFlagged] = useState(false);
 
   const user = useContext(UserContext);
   const siteInfo = useContext(SiteInfoContext);
@@ -127,6 +128,7 @@ export default function Profile() {
   const isSelf = profileUserId === user.id;
   const isBlocked = !isSelf && user.blockedUsers.indexOf(profileUserId) !== -1;
   const canViewNameHistory = user.perms.seeModPanel;
+  const canViewFlagged = user.perms.viewFlagged;
 
   // userId is the id of the current profile
   // user.id is the id of the current user
@@ -200,6 +202,7 @@ export default function Profile() {
     setEditingPronouns(false);
     setUserFamily(null);
     setProfileFamily(null);
+    setIsFlagged(false);
 
     if (userId) {
       setProfileLoaded(false);
@@ -252,6 +255,7 @@ export default function Profile() {
           setTrophies(res.data.trophies || []);
           setProfileFamily(res.data.family || null);
           setJoined(res.data.joined || null);
+          setIsFlagged(Boolean(res.data.flagged));
           setFriendsPage(1);
           loadFriends(resolvedId, "", 1);
 
@@ -888,60 +892,77 @@ export default function Profile() {
         justifyContent: "center",
       }}
     >
-      <Stack direction="row" className="options">
-        {!isSelf && user.loggedIn && (
-          <>
-            <IconButton aria-label="friend user">
-              <i
-                className={`fas fa-user-plus ${isFriend ? "sel" : ""}`}
-                onClick={onFriendUserClick}
+      <Stack direction="column" spacing={0.5} sx={{ alignItems: "center" }}>
+        <Stack direction="row" className="options">
+          {!isSelf && user.loggedIn && (
+            <>
+              <IconButton aria-label="friend user">
+                <i
+                  className={`fas fa-user-plus ${isFriend ? "sel" : ""}`}
+                  onClick={onFriendUserClick}
+                />
+              </IconButton>
+              {userFamily &&
+                userFamily.isLeader &&
+                userFamily.memberCount < 20 && (
+                  <IconButton
+                    aria-label="request to join family"
+                    title={`Invite to ${userFamily.name}`}
+                  >
+                    <i
+                      className="fas fa-users"
+                      onClick={onFamilyJoinRequestClick}
+                    />
+                  </IconButton>
+                )}
+              <LoveIcon
+                isLove={isLove}
+                userId={user.id}
+                isMarried={isMarried}
+                love={love}
+                currentUserLove={currentUserLove}
+                onClick={onLoveUserClick}
               />
-            </IconButton>
-            {userFamily &&
-              userFamily.isLeader &&
-              userFamily.memberCount < 20 && (
-                <IconButton
-                  aria-label="request to join family"
-                  title={`Invite to ${userFamily.name}`}
-                >
-                  <i
-                    className="fas fa-users"
-                    onClick={onFamilyJoinRequestClick}
-                  />
-                </IconButton>
-              )}
-            <LoveIcon
-              isLove={isLove}
-              userId={user.id}
-              isMarried={isMarried}
-              love={love}
-              currentUserLove={currentUserLove}
-              onClick={onLoveUserClick}
-            />
-            <MarriedIcon
-              isLove={isLove}
-              saved={saved}
-              userId={user.id}
-              love={love}
-              isMarried={isMarried}
-              onClick={onMarryUserClick}
-            />
-            <IconButton aria-label="block user">
-              <i
-                className={`fas fa-ban ${isBlocked ? "sel" : ""}`}
-                onClick={onBlockUserClick}
-                title="Block user"
+              <MarriedIcon
+                isLove={isLove}
+                saved={saved}
+                userId={user.id}
+                love={love}
+                isMarried={isMarried}
+                onClick={onMarryUserClick}
               />
-            </IconButton>
-            <IconButton size="small" onClick={onReportClick}>
-              <i className="fas fa-flag" />
-            </IconButton>
-            <ReportDialog
-              open={reportDialogOpen}
-              onClose={() => setReportDialogOpen(false)}
-              prefilledArgs={{ userId: profileUserId, userName: name }}
-            />
-          </>
+              <IconButton aria-label="block user">
+                <i
+                  className={`fas fa-ban ${isBlocked ? "sel" : ""}`}
+                  onClick={onBlockUserClick}
+                  title="Block user"
+                />
+              </IconButton>
+              <IconButton size="small" onClick={onReportClick}>
+                <i className="fas fa-flag" />
+              </IconButton>
+              <ReportDialog
+                open={reportDialogOpen}
+                onClose={() => setReportDialogOpen(false)}
+                prefilledArgs={{ userId: profileUserId, userName: name }}
+              />
+            </>
+          )}
+        </Stack>
+        {!isSelf && user.loggedIn && canViewFlagged && (
+          <Stack direction="row" className="options">
+            <Tooltip title={isFlagged ? "User is flagged" : "User is not flagged"}>
+              <IconButton size="small" aria-label="user flagged status">
+                <i
+                  className="fas fa-flag"
+                  style={{
+                    color: "error.main",
+                    opacity: isFlagged ? 1 : 0.35,
+                  }}
+                />
+              </IconButton>
+            </Tooltip>
+          </Stack>
         )}
       </Stack>
     </Grid>
diff --git a/routes/mod.js b/routes/mod.js
@@ -991,33 +991,6 @@ router.get("/alts", async (req, res) => {
   }
 });
 
-router.get("/flagged", async (req, res) => {
-  res.setHeader("Content-Type", "application/json");
-  try {
-    var userId = await routeUtils.verifyLoggedIn(req);
-    var userIdToActOn = String(req.query.userId);
-    var perm = "viewFlagged";
-
-    if (!(await routeUtils.verifyPermission(res, userId, perm))) return;
-
-    var user = await models.User.findOne({
-      id: userIdToActOn /*, deleted: false*/,
-    }).select("flagged");
-
-    if (!user) {
-      res.status(500);
-      res.send("User does not exist.");
-      return;
-    }
-
-    res.send(user.flagged);
-  } catch (e) {
-    logger.error(e);
-    res.status(500);
-    res.send("Error loading alt accounts.");
-  }
-});
-
 router.post("/clearSetupName", async (req, res) => {
   res.setHeader("Content-Type", "application/json");
   try {
diff --git a/routes/user.js b/routes/user.js
@@ -264,10 +264,39 @@ router.get("/:id/profile", async function (req, res) {
     }
 
     var isSelf = reqUserId == userId;
+    const canViewFlagged = reqUserId
+      ? await redis.hasPermission(reqUserId, "viewFlagged")
+      : false;
+    const profileSelectFields = [
+      "id",
+      "name",
+      "avatar",
+      "profileBackground",
+      "settings",
+      "accounts",
+      "wins",
+      "losses",
+      "kudos",
+      "karma",
+      "points",
+      "pointsNegative",
+      "championshipPoints",
+      "achievements",
+      "bio",
+      "pronouns",
+      "banner",
+      "setups",
+      "games",
+      "numFriends",
+      "stats",
+      "lastActive",
+      "joined",
+      "_id",
+    ];
+    if (canViewFlagged) profileSelectFields.push("flagged");
+
     var user = await models.User.findOne({ id: userId, deleted: false })
-      .select(
-        "id name avatar profileBackground settings accounts wins losses kudos karma points pointsNegative championshipPoints achievements bio pronouns banner setups games numFriends stats lastActive joined _id"
-      )
+      .select(profileSelectFields.join(" "))
       .populate({
         path: "setups",
         select:
