From 97933602350bdd35c289fbf2badc60de0927c52a Mon Sep 17 00:00:00 2001
From: ValueOn AG <p.motsch@valueon.ch>
Date: Wed, 18 Feb 2026 21:10:43 +0100
Subject: [PATCH] security: hide system bot join mode for non-SysAdmin users

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 src/pages/views/teamsbot/TeamsbotDashboardView.tsx | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/pages/views/teamsbot/TeamsbotDashboardView.tsx b/src/pages/views/teamsbot/TeamsbotDashboardView.tsx
index 9be4695..1869be3 100644
--- a/src/pages/views/teamsbot/TeamsbotDashboardView.tsx
+++ b/src/pages/views/teamsbot/TeamsbotDashboardView.tsx
@@ -3,6 +3,7 @@ import { useNavigate } from 'react-router-dom';
 import { useCurrentInstance } from '../../../hooks/useCurrentInstance';
 import * as teamsbotApi from '../../../api/teamsbotApi';
 import type { TeamsbotSession, StartSessionRequest, TeamsbotJoinMode } from '../../../api/teamsbotApi';
+import { getUserDataCache } from '../../../utils/userCache';
 import styles from './Teamsbot.module.css';
 
 /**
@@ -14,6 +15,9 @@ export const TeamsbotDashboardView: React.FC = () => {
   const instanceId = instance?.id || '';
   const navigate = useNavigate();
 
+  const cachedUser = getUserDataCache();
+  const _isSysAdmin = cachedUser?.isSysAdmin === true;
+
   const [sessions, setSessions] = useState<TeamsbotSession[]>([]);
   const [loading, setLoading] = useState(true);
   const [error, setError] = useState<string | null>(null);
@@ -154,7 +158,7 @@ export const TeamsbotDashboardView: React.FC = () => {
             onChange={(e) => setJoinMode(e.target.value as TeamsbotJoinMode)}
             disabled={isStarting}
           >
-            <option value="systemBot">System-Bot (authentifiziert)</option>
+            {_isSysAdmin && <option value="systemBot">System-Bot (authentifiziert)</option>}
             <option value="anonymous">Anonymer Gast</option>
             <option value="userAccount">Mein Account</option>
           </select>