From d39e8b632f7618782bf4262250bc914909c83edc Mon Sep 17 00:00:00 2001
From: Ivo Oskamp <ivooskamp@oskamp.info>
Date: Sun, 8 Feb 2026 12:03:07 +0100
Subject: [PATCH] Fix Users section based on feedback: dashboard redirect,
 remove email field, admin protection, update role scenarios

---
 .../documentation/users/profile-settings.html |  4 +--
 .../documentation/users/users-and-roles.html  | 30 +++++++++++++++----
 2 files changed, 25 insertions(+), 9 deletions(-)

diff --git a/containers/backupchecks/src/templates/documentation/users/profile-settings.html b/containers/backupchecks/src/templates/documentation/users/profile-settings.html
index 0f597af..e74455a 100644
--- a/containers/backupchecks/src/templates/documentation/users/profile-settings.html
+++ b/containers/backupchecks/src/templates/documentation/users/profile-settings.html
@@ -29,14 +29,13 @@
 
 <ul>
   <li><strong>Username:</strong> Your login username (cannot be changed by users)</li>
-  <li><strong>Email:</strong> Your email address (if configured by admin)</li>
   <li><strong>Assigned Roles:</strong> The roles you have been granted</li>
   <li><strong>Active Role:</strong> Your currently selected role</li>
 </ul>
 
 <div class="doc-callout doc-callout-info">
   <strong>💡 Note:</strong><br>
-  Only administrators can modify usernames, email addresses, and role assignments via Settings → User Management.
+  Only administrators can modify usernames and role assignments via Settings → User Management.
 </div>
 
 <h2>Changing Your Password</h2>
@@ -197,7 +196,6 @@
 
 <ul>
   <li>Username (required for login)</li>
-  <li>Email address (optional, set by admin)</li>
   <li>Password hash (securely encrypted)</li>
   <li>Assigned roles</li>
   <li>Theme preference</li>
diff --git a/containers/backupchecks/src/templates/documentation/users/users-and-roles.html b/containers/backupchecks/src/templates/documentation/users/users-and-roles.html
index c400fe0..3fc36c0 100644
--- a/containers/backupchecks/src/templates/documentation/users/users-and-roles.html
+++ b/containers/backupchecks/src/templates/documentation/users/users-and-roles.html
@@ -147,11 +147,16 @@
 <ol>
   <li>Navigate to <strong>Settings</strong> → <strong>User Management</strong> (Admin only)</li>
   <li>Click <strong>New User</strong></li>
-  <li>Enter username, email, and password</li>
+  <li>Enter username and password</li>
   <li>Assign one or more roles (comma-separated: e.g., "admin,operator")</li>
   <li>Save the user</li>
 </ol>
 
+<div class="doc-callout doc-callout-info">
+  <strong>📝 Future Feature:</strong><br>
+  Email address configuration for users is planned for a future update. The database field exists but is not yet available in the user interface.
+</div>
+
 <h3>Editing User Roles</h3>
 
 <ol>
@@ -166,6 +171,15 @@
   Role changes take effect immediately. If you remove a user's current active role, they will be switched to their first remaining role automatically.
 </div>
 
+<h3>Deleting Users</h3>
+
+<p>Administrators can delete user accounts via Settings → User Management.</p>
+
+<div class="doc-callout doc-callout-warning">
+  <strong>⚠️ Admin Account Protection:</strong><br>
+  If there is only one admin user in the system, that account is protected and cannot be deleted. BackupChecks requires at least one admin user at all times to prevent being locked out of system administration.
+</div>
+
 <h2>Role Switching</h2>
 
 <p>Users with multiple roles can switch between them using the role selector in the navigation bar (top-right corner, next to the username).</p>
@@ -176,10 +190,14 @@
   <li>Locate the role dropdown in the top-right corner of the navigation bar</li>
   <li>Click the dropdown to see your assigned roles</li>
   <li>Select the role you want to activate</li>
-  <li>The page will reload and the interface will adapt to the selected role</li>
+  <li>You will be automatically redirected to the <strong>Dashboard</strong> page</li>
+  <li>The navigation menu, available features, and permissions update to match your active role</li>
 </ol>
 
-<p>The navigation menu, available features, and permissions update immediately to match your active role.</p>
+<div class="doc-callout doc-callout-info">
+  <strong>💡 Why Dashboard Redirect?</strong><br>
+  When switching roles, you are automatically redirected to the Dashboard to prevent permission errors. This ensures you don't remain on a page you no longer have access to with your new role, which would require you to manually navigate away or refresh the page.
+</div>
 
 <h2>Best Practices</h2>
 
@@ -228,9 +246,9 @@
       <td>Needs to verify backup status without making changes</td>
     </tr>
     <tr>
-      <td>Dual-Function User</td>
-      <td>operator, reporter</td>
-      <td>Performs daily reviews and also generates reports</td>
+      <td>Power User</td>
+      <td>admin, operator</td>
+      <td>Needs both operational access and occasional system configuration (use sparingly)</td>
     </tr>
   </tbody>
 </table>