Administration
Admin Panel
Overview of the administrative command center, role hierarchy, and permissions.
Admin Panel
The Admin Control Center (https://go.arcn.online/admin) gives system owners and moderators comprehensive observability and governance tools to operate GO Shortener safely at scale.
Role Hierarchy & Permissions
GO Shortener enforces a three-tier Role-Based Access Control (RBAC) model:
+-------------------------------------------------------------+
| SUPER ADMIN |
| Full system control: Role management, system configuration,|
| security audit viewing, moderator oversight |
+-------------------------------------------------------------+
|
+-------------------------------------------------------------+
| MODERATOR |
| Operational control: Link inspection, user bans & timeouts,|
| abuse report resolution, permanent link approvals |
+-------------------------------------------------------------+
|
+-------------------------------------------------------------+
| STANDARD USER |
| Link creation, personal dashboard, link renewals, reports |
+-------------------------------------------------------------+
Role Capabilities Comparison
| Permission | user | moderator | super_admin |
|---|---|---|---|
| Create Short Links & View Personal Analytics | ✅ | ✅ | ✅ |
Access Admin Overview Metrics (/admin) | ❌ | ✅ | ✅ |
| Search & Inspect All Users | ❌ | ✅ | ✅ |
| Apply User Timeouts & Bans | ❌ | ✅ | ✅ |
| Moderate Links (Disable, Enable, Delete) | ❌ | ✅ | ✅ |
Resolve Abuse Reports (/report) | ❌ | ✅ | ✅ |
| Approve / Reject Permanent Link Requests | ❌ | ✅ | ✅ |
| Promote / Demote User Roles | ❌ | ❌ | ✅ |
View Security Audit Records (/admin/login-records) | ❌ | ❌ | ✅ |
Super Admin Immutability
To guarantee that the platform cannot be hijacked or locked out by compromised moderator accounts, the core backend implements strict service guardrails:
moderator account to ban, timeout, or alter the role of a super_admin account. The service explicitly denies such requests with 403 Forbidden and logs the security violation to the audit records.System Overview Metrics
Upon opening /admin, administrators are greeted with live system telemetry:
- Total Links: Cumulative links stored in SQLite across all time.
- Active Links: Links currently valid and actively routing redirects.
- Registered Users: Total user accounts in the database.
- Total Clicks: Global click counter across all shortened links.
- Pending Abuse Reports: Flagged URLs requiring moderator review.
- Pending Permanent Requests: Unprocessed permanent link applications.