@consilioweb/payload-support 4.0.0 → 6.0.0

package/src/utils/retention.ts

@@ -0,0 +1,111 @@
+import type { Payload, PayloadRequest } from 'payload'
+import type { CollectionSlugs } from './slugs'
+import { dbDelete } from './db'
+
+/**
+ * How long the two journals are kept, in days.
+ *
+ * Defaults follow the CNIL guidance the README documents: six months would be
+ * the floor for connection logs, a year is the ceiling usually accepted, and
+ * these two values sit inside that range while staying long enough to
+ * investigate an intrusion. Set a value to 0 to disable the automatic purge of
+ * that journal — never to mean "delete everything", which is what `days=0`
+ * means on the manual endpoint.
+ */
+export interface RetentionConfig {
+  /** Retention of `auth-logs` in days. `0` disables the scheduled purge. */
+  authLogsDays?: number
+  /** Retention of `email-logs` in days. `0` disables the scheduled purge. */
+  emailLogsDays?: number
+  /**
+   * Cron for the scheduled purge. Payload's cron takes an optional leading
+   * seconds field. Default: every day at 03:30.
+   */
+  cron?: string
+  /** Queue the scheduled job is pushed to. Default: `default`. */
+  queue?: string
+}
+
+export const DEFAULT_RETENTION = {
+  authLogsDays: 180,
+  emailLogsDays: 365,
+  cron: '0 30 3 * * *',
+  queue: 'default',
+} as const
+
+export const PURGE_LOGS_TASK_SLUG = 'support-purge-logs'
+
+/** Journals the purge is allowed to touch, keyed by their public name. */
+export function purgeableCollections(slugs: CollectionSlugs): Record<string, string> {
+  return {
+    'email-logs': slugs.emailLogs,
+    'auth-logs': slugs.authLogs,
+  }
+}
+
+/**
+ * Delete rows of `slug` created more than `days` days ago.
+ *
+ * `days <= 0` means "everything" and is only reachable from the manual
+ * admin-only endpoint. The scheduled task refuses it: a misconfigured cron
+ * that wipes the whole security journal every night is a far worse outcome
+ * than a journal that grows.
+ */
+export async function purgeOlderThan(
+  payload: Payload,
+  slug: string,
+  days: number,
+  req?: PayloadRequest,
+): Promise<number> {
+  const cutoff = days > 0 ? new Date(Date.now() - days * 86400000).toISOString() : null
+
+  const result = await dbDelete(payload, slug, {
+    where: cutoff
+      ? { createdAt: { less_than: cutoff } }
+      : { id: { exists: true } },
+    overrideAccess: true,
+    ...(req ? { req } : {}),
+  })
+
+  return Array.isArray(result?.docs) ? result.docs.length : 0
+}
+
+export interface ScheduledPurgeResult {
+  purged: Record<string, number>
+  skipped: string[]
+}
+
+/**
+ * The scheduled half of the purge. Never accepts `days <= 0`, and silently
+ * skips a journal whose collection is not registered (its feature flag is off).
+ */
+export async function runScheduledPurge(
+  payload: Payload,
+  slugs: CollectionSlugs,
+  retention: RetentionConfig | false | undefined,
+  req?: PayloadRequest,
+): Promise<ScheduledPurgeResult> {
+  if (retention === false) return { purged: {}, skipped: ['auth-logs', 'email-logs'] }
+
+  const plan: Array<[string, string, number]> = [
+    ['auth-logs', slugs.authLogs, retention?.authLogsDays ?? DEFAULT_RETENTION.authLogsDays],
+    ['email-logs', slugs.emailLogs, retention?.emailLogsDays ?? DEFAULT_RETENTION.emailLogsDays],
+  ]
+
+  const purged: Record<string, number> = {}
+  const skipped: string[] = []
+
+  for (const [name, slug, days] of plan) {
+    if (!Number.isFinite(days) || days <= 0) {
+      skipped.push(name)
+      continue
+    }
+    if (!(payload.collections as Record<string, unknown> | undefined)?.[slug]) {
+      skipped.push(name)
+      continue
+    }
+    purged[name] = await purgeOlderThan(payload, slug, days, req)
+  }
+
+  return { purged, skipped }
+}

package/src/utils/slugs.ts

@@ -58,6 +58,21 @@ export const DEFAULT_SLUGS: CollectionSlugs = {
   media: 'media',
 }
 
+/**
+ * Collections the plugin registers under a FIXED slug.
+ *
+ * Unlike everything in `CollectionSlugs`, these three hardcode their `slug`
+ * (ClientSummaries.ts, TicketCollaborators.ts, TicketFeedback.ts), so any code
+ * that reads or deletes their rows must use these literals rather than a
+ * configurable slug — otherwise an app that overrides `collectionSlugs` would
+ * address a collection that does not exist.
+ */
+export const FIXED_SLUGS = {
+  clientSummaries: 'client-summaries',
+  ticketCollaborators: 'ticket-collaborators',
+  ticketFeedback: 'ticket-feedback',
+} as const
+
 /**
  * Resolve collection slugs merging user overrides with defaults.
  */

package/src/utils/twoFactorChallenge.ts

@@ -36,7 +36,12 @@ function challengeSecret(): string {
   return secret
 }
 
-function normalizeEmail(email: string): string {
+/**
+ * The address the challenge is signed over. Also the rate-limit key of both 2FA
+ * branches: signing over the normalized form while keying the limiter on the raw
+ * one would give a single challenge one budget PER CASING VARIANT.
+ */
+export function normalizeEmail(email: string): string {
   return String(email).trim().toLowerCase()
 }
 

package/src/utils/urlSafety.ts

@@ -2,7 +2,7 @@ import { lookup } from 'dns/promises'
 
 /**
  * SSRF guards for every URL the SERVER follows on behalf of a user-supplied
- * value (today: outbound webhook endpoints).
+ * value: outbound webhook endpoints, and Web Push subscription endpoints.
  *
  * `webhook-endpoints.url` is a plain `text` field with no validation, writable by
  * any member of the staff collection, and `_sendToEndpoint` used to `fetch()` it
@@ -144,6 +144,41 @@ export const WEBHOOK_URL_MESSAGES: Record<NonNullable<UrlValidationResult['reaso
   private_host: 'Les adresses privées, loopback et link-local sont interdites (SSRF).',
 }
 
+/**
+ * A `push-subscriptions.endpoint` is the same shape of hole as a webhook URL,
+ * from the same actor: `requireAdmin` only checks that the caller belongs to the
+ * staff collection, the field is plain `text` with no `validate`, no collection
+ * hook rewrites it, and `web-push` then hands the hostname and PORT straight to
+ * `https.request` with no allowlist of its own. Pointing it at an internal
+ * service turned every client reply into an outbound request of the attacker's
+ * choosing, with a 1-bit oracle: a 404/410 deletes the row, and staff can read
+ * `push-subscriptions` back.
+ *
+ * Stricter than `validateWebhookUrl` on two points, both because `web-push`
+ * behaves differently from `fetch`:
+ *  - https only, with NO `SUPPORT_ALLOW_INSECURE_WEBHOOKS` escape hatch —
+ *    `web-push` calls `https.request` whatever the scheme says, so an `http://`
+ *    endpoint is a broken subscription, not a dev convenience;
+ *  - an explicit length cap, because unlike a webhook URL this value arrives
+ *    from an HTTP body and is persisted verbatim.
+ */
+const MAX_PUSH_ENDPOINT_LENGTH = 2048
+
+export function validatePushEndpoint(raw: unknown): UrlValidationResult {
+  if (typeof raw !== 'string' || !raw.trim() || raw.length > MAX_PUSH_ENDPOINT_LENGTH) {
+    return { ok: false, reason: 'invalid_url' }
+  }
+  let url: URL
+  try {
+    url = new URL(raw.trim())
+  } catch {
+    return { ok: false, reason: 'invalid_url' }
+  }
+  if (url.protocol !== 'https:') return { ok: false, reason: 'scheme_not_allowed' }
+  if (isBlockedHost(url.hostname)) return { ok: false, reason: 'private_host' }
+  return { ok: true, url }
+}
+
 /**
  * Resolve the name and reject unless EVERY resolved address is public.
  *

package/src/views/BillingView/client.tsx

@@ -1,6 +1,6 @@
 'use client'
 
-import React, { useState, useCallback } from 'react'
+import React, { useState, useCallback, useId } from 'react'
 import { useTranslation } from '../../components/TicketConversation/hooks/useTranslation'
 import { DATE_LOCALE } from '../shared/dateLocale'
 import styles from '../../styles/BillingView.module.scss'
@@ -86,6 +86,12 @@ function getQuarterRange(offset: number): { from: string; to: string } {
 
 export const BillingClient: React.FC = () => {
   const { t } = useTranslation()
+  // The `<label>`s in the filter row already carry the translated text; they
+  // just were not associated with their control.
+  const fromId = useId()
+  const toId = useId()
+  const projectFilterId = useId()
+  const rateId = useId()
   const [from, setFrom] = useState(() => getMonthRange(0).from)
   const [to, setTo] = useState(() => getMonthRange(0).to)
   const [projectId, setProjectId] = useState('')
@@ -287,16 +293,16 @@ export const BillingClient: React.FC = () => {
 
         <div className={styles.filterRow}>
           <div className={styles.fieldGroup}>
-            <label className={styles.label}>{t('billing.filters.from')}</label>
-            <input type="date" value={from} onChange={(e) => setFrom(e.target.value)} className={styles.input} />
+            <label className={styles.label} htmlFor={fromId}>{t('billing.filters.from')}</label>
+            <input id={fromId} type="date" value={from} onChange={(e) => setFrom(e.target.value)} className={styles.input} />
           </div>
           <div className={styles.fieldGroup}>
-            <label className={styles.label}>{t('billing.filters.to')}</label>
-            <input type="date" value={to} onChange={(e) => setTo(e.target.value)} className={styles.input} />
+            <label className={styles.label} htmlFor={toId}>{t('billing.filters.to')}</label>
+            <input id={toId} type="date" value={to} onChange={(e) => setTo(e.target.value)} className={styles.input} />
           </div>
           <div className={styles.fieldGroup}>
-            <label className={styles.label}>{t('billing.filters.project')}</label>
-            <select value={projectId} onChange={(e) => setProjectId(e.target.value)} className={styles.select}>
+            <label className={styles.label} htmlFor={projectFilterId}>{t('billing.filters.project')}</label>
+            <select id={projectFilterId} value={projectId} onChange={(e) => setProjectId(e.target.value)} className={styles.select}>
               <option value="">{t('ticket.allProjects')}</option>
               {projects.map((p) => (
                 <option key={p.id} value={p.id}>{p.name}</option>
@@ -304,9 +310,10 @@ export const BillingClient: React.FC = () => {
             </select>
           </div>
           <div className={styles.fieldGroup}>
-            <label className={styles.label}>{t('billing.filters.hourlyRate')}</label>
+            <label className={styles.label} htmlFor={rateId}>{t('billing.filters.hourlyRate')}</label>
             <div className={styles.rateRow}>
               <input
+                id={rateId}
                 type="number"
                 value={rate}
                 onChange={(e) => setRate(Number(e.target.value))}
@@ -370,6 +377,7 @@ export const BillingClient: React.FC = () => {
                         <th className={styles.thCheckbox}>
                           <input
                             type="checkbox"
+                            aria-label={t('billing.tableCheckboxTitle')}
                             checked={group.tickets.every((t) => billedTickets.has(t.id))}
                             onChange={() => {
                               const ids = group.tickets.map((t) => t.id)
@@ -405,6 +413,7 @@ export const BillingClient: React.FC = () => {
                             <td className={styles.td} rowSpan={rowSpan} style={{ verticalAlign: 'middle' }}>
                               <input
                                 type="checkbox"
+                                aria-label={isBilled ? t('billing.markUnbilledTitle') : t('billing.markBilledTitle')}
                                 checked={isBilled}
                                 onChange={() => toggleBilled(ticket.id)}
                                 className={styles.checkbox}

package/src/views/BillingView/index.tsx

@@ -1,6 +1,7 @@
 import type { AdminViewServerProps } from 'payload'
 import { DefaultTemplate } from '@payloadcms/next/templates'
 import { redirect } from 'next/navigation'
+import { supportViewRedirectTarget } from '../shared/viewAccess.js'
 import React from 'react'
 import { AdminErrorBoundary } from '../shared/ErrorBoundary'
 import { BillingClient } from './client'
@@ -8,9 +9,8 @@ import { BillingClient } from './client'
 export const BillingView: React.FC<AdminViewServerProps> = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult
 
-  if (!req.user) {
-    redirect('/admin/login')
-  }
+  const redirectTo = supportViewRedirectTarget(initPageResult)
+  if (redirectTo) redirect(redirectTo)
 
   return (
     <DefaultTemplate
@@ -20,7 +20,7 @@ export const BillingView: React.FC<AdminViewServerProps> = ({ initPageResult })
       payload={req.payload}
       permissions={initPageResult.permissions}
       searchParams={{}}
-      user={req.user}
+      user={req.user ?? undefined}
       visibleEntities={visibleEntities}
     >
       <AdminErrorBoundary viewName="BillingView">

package/src/views/ChatView/client.tsx

@@ -343,6 +343,7 @@ export const ChatViewClient: React.FC = () => {
               <form onSubmit={sendMessage} className={styles.composer}>
                 {cannedResponses.length > 0 && (
                   <select
+                    aria-label={t('chat.quickReply')}
                     onChange={(e) => {
                       const cr = cannedResponses.find((c) => String(c.id) === e.target.value)
                       if (cr) setInput(cr.body)
@@ -359,6 +360,7 @@ export const ChatViewClient: React.FC = () => {
                 <div className={styles.composerRow}>
                   <input
                     type="text"
+                    aria-label={t('chat.inputPlaceholder')}
                     value={input}
                     onChange={(e) => setInput(e.target.value)}
                     placeholder={t('chat.inputPlaceholder')}

package/src/views/ChatView/index.tsx

@@ -1,6 +1,7 @@
 import type { AdminViewServerProps } from 'payload'
 import { DefaultTemplate } from '@payloadcms/next/templates'
 import { redirect } from 'next/navigation'
+import { supportViewRedirectTarget } from '../shared/viewAccess.js'
 import React from 'react'
 import { AdminErrorBoundary } from '../shared/ErrorBoundary'
 import { ChatViewClient } from './client'
@@ -8,9 +9,8 @@ import { ChatViewClient } from './client'
 export const ChatView: React.FC<AdminViewServerProps> = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult
 
-  if (!req.user) {
-    redirect('/admin/login')
-  }
+  const redirectTo = supportViewRedirectTarget(initPageResult)
+  if (redirectTo) redirect(redirectTo)
 
   return (
     <DefaultTemplate
@@ -20,7 +20,7 @@ export const ChatView: React.FC<AdminViewServerProps> = ({ initPageResult }) =>
       payload={req.payload}
       permissions={initPageResult.permissions}
       searchParams={{}}
-      user={req.user}
+      user={req.user ?? undefined}
       visibleEntities={visibleEntities}
     >
       <AdminErrorBoundary viewName="ChatView">

package/src/views/CrmView/client.tsx

@@ -275,6 +275,7 @@ export const CrmClient: React.FC = () => {
           <div className={styles.sidebarSearch}>
             <input
               type="text"
+              aria-label={t('crm.searchLabel')}
               placeholder={t('crm.searchPlaceholder')}
               value={search}
               onChange={(e) => setSearch(e.target.value)}
@@ -379,6 +380,7 @@ export const CrmClient: React.FC = () => {
                   </p>
                   <input
                     type="text"
+                    aria-label={t('crm.mergeTitle')}
                     value={mergeSearch}
                     onChange={(e) => setMergeSearch(e.target.value)}
                     placeholder={t('crm.mergeSearchPlaceholder')}

package/src/views/CrmView/index.tsx

@@ -1,6 +1,7 @@
 import type { AdminViewServerProps } from 'payload'
 import { DefaultTemplate } from '@payloadcms/next/templates'
 import { redirect } from 'next/navigation'
+import { supportViewRedirectTarget } from '../shared/viewAccess.js'
 import React from 'react'
 import { AdminErrorBoundary } from '../shared/ErrorBoundary'
 import { CrmClient } from './client'
@@ -8,9 +9,8 @@ import { CrmClient } from './client'
 export const CrmView: React.FC<AdminViewServerProps> = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult
 
-  if (!req.user) {
-    redirect('/admin/login')
-  }
+  const redirectTo = supportViewRedirectTarget(initPageResult)
+  if (redirectTo) redirect(redirectTo)
 
   return (
     <DefaultTemplate
@@ -20,7 +20,7 @@ export const CrmView: React.FC<AdminViewServerProps> = ({ initPageResult }) => {
       payload={req.payload}
       permissions={initPageResult.permissions}
       searchParams={{}}
-      user={req.user}
+      user={req.user ?? undefined}
       visibleEntities={visibleEntities}
     >
       <AdminErrorBoundary viewName="CrmView">

package/src/views/EmailTrackingView/client.tsx

@@ -2,6 +2,7 @@
 
 import React, { useState, useEffect, useCallback } from 'react'
 import { useTranslation } from '../../components/TicketConversation/hooks/useTranslation'
+import { V } from '../shared/adminTokens'
 import { DATE_LOCALE } from '../shared/dateLocale'
 import s from '../../styles/EmailTracking.module.scss'
 
@@ -111,7 +112,7 @@ export const EmailTrackingClient: React.FC = () => {
             <button key={v} className={`${s.dateRangeBtn} ${dateRange === v ? s.dateRangeActive : ''}`} onClick={() => setDateRange(v)}>{v}j</button>
           ))}
         </div>
-        <input type="text" className={s.searchInput} placeholder={t('emailTracking.searchPlaceholder')} value={search} onChange={(e) => setSearch(e.target.value)} />
+        <input type="text" className={s.searchInput} aria-label={t('emailTracking.searchLabel')} placeholder={t('emailTracking.searchPlaceholder')} value={search} onChange={(e) => setSearch(e.target.value)} />
       </div>
 
       {/* Table */}
@@ -125,7 +126,7 @@ export const EmailTrackingClient: React.FC = () => {
           <tbody>
             {logs.map((log) => (
               <React.Fragment key={log.id}>
-                <tr onClick={() => log.status === 'error' && log.errorMessage ? setExpandedRow(expandedRow === log.id ? null : log.id) : null} style={{ cursor: log.status === 'error' && log.errorMessage ? 'pointer' : 'default' }}>
+                <tr>
                   <td style={{ fontSize: 12, whiteSpace: 'nowrap' }}>{fmtDate(log.createdAt)}</td>
                   <td style={{ maxWidth: 200, overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' }} title={log.recipientEmail}>{log.recipientEmail || '—'}</td>
                   <td style={{ maxWidth: 250, overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' }} title={log.subject}>{log.subject || '—'}</td>
@@ -137,14 +138,24 @@ export const EmailTrackingClient: React.FC = () => {
                       <span className={`${s.processingTime} ${log.processingTimeMs > 2000 ? s.timeSlow : log.processingTimeMs > 500 ? s.timeMedium : s.timeFast}`}>{log.processingTimeMs}ms</span>
                     ) : '—'}
                     {log.status === 'error' && log.errorMessage && (
-                      <button className={s.expandBtn} onClick={(e) => { e.stopPropagation(); setExpandedRow(expandedRow === log.id ? null : log.id) }}>
+                      /* The row itself carries no handler: a `<tr onClick>` is
+                       * unreachable by keyboard and role="button" on a row would
+                       * destroy the table semantics. This button is the control. */
+                      <button
+                        type="button"
+                        className={s.expandBtn}
+                        aria-expanded={expandedRow === log.id}
+                        aria-controls={`email-error-${log.id}`}
+                        aria-label={t('emailTracking.toggleError')}
+                        onClick={() => setExpandedRow(expandedRow === log.id ? null : log.id)}
+                      >
                         {expandedRow === log.id ? '▴' : '▾'}
                       </button>
                     )}
                   </td>
                 </tr>
                 {expandedRow === log.id && log.errorMessage && (
-                  <tr><td colSpan={7}><div className={s.errorDetail}>Erreur{log.httpStatus ? ` (HTTP ${log.httpStatus})` : ''}: {log.errorMessage}</div></td></tr>
+                  <tr><td colSpan={7}><div className={s.errorDetail} id={`email-error-${log.id}`}>{t('emailTracking.errorLabel')}{log.httpStatus ? ` (HTTP ${log.httpStatus})` : ''}: {log.errorMessage}</div></td></tr>
                 )}
               </React.Fragment>
             ))}
@@ -155,9 +166,9 @@ export const EmailTrackingClient: React.FC = () => {
       {/* Pagination */}
       {totalDocs > 0 && (
         <div className={s.pagination}>
-          <button className={s.pageBtn} onClick={() => setPage((p) => Math.max(1, p - 1))} disabled={page <= 1}>{t('common.previous')}</button>
-          <span style={{ fontSize: 12, color: 'var(--theme-elevation-500)', alignSelf: 'center' }}>{t('common.page')} {page} — {totalDocs} {t('common.results')}</span>
-          <button className={s.pageBtn} onClick={() => setPage((p) => p + 1)} disabled={!hasMore}>{t('common.next')}</button>
+          <button type="button" className={s.pageBtn} onClick={() => setPage((p) => Math.max(1, p - 1))} disabled={page <= 1}>{t('common.previous')}</button>
+          <span style={{ fontSize: 12, color: V.textSecondary, alignSelf: 'center' }}>{t('common.page')} {page} — {totalDocs} {t('common.results')}</span>
+          <button type="button" className={s.pageBtn} onClick={() => setPage((p) => p + 1)} disabled={!hasMore}>{t('common.next')}</button>
         </div>
       )}
     </div>

package/src/views/EmailTrackingView/index.tsx

@@ -1,6 +1,7 @@
 import type { AdminViewServerProps } from 'payload'
 import { DefaultTemplate } from '@payloadcms/next/templates'
 import { redirect } from 'next/navigation'
+import { supportViewRedirectTarget } from '../shared/viewAccess.js'
 import React from 'react'
 import { AdminErrorBoundary } from '../shared/ErrorBoundary'
 import { EmailTrackingClient } from './client'
@@ -8,9 +9,8 @@ import { EmailTrackingClient } from './client'
 export const EmailTrackingView: React.FC<AdminViewServerProps> = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult
 
-  if (!req.user) {
-    redirect('/admin/login')
-  }
+  const redirectTo = supportViewRedirectTarget(initPageResult)
+  if (redirectTo) redirect(redirectTo)
 
   return (
     <DefaultTemplate
@@ -20,7 +20,7 @@ export const EmailTrackingView: React.FC<AdminViewServerProps> = ({ initPageResu
       payload={req.payload}
       permissions={initPageResult.permissions}
       searchParams={{}}
-      user={req.user}
+      user={req.user ?? undefined}
       visibleEntities={visibleEntities}
     >
       <AdminErrorBoundary viewName="EmailTrackingView">

package/src/views/ImportConversationView/client.tsx

@@ -192,6 +192,7 @@ export function ImportConversationClient() {
             ref={fileRef}
             type="file"
             accept=".md,.txt"
+            aria-label={t('import.acceptedFormats')}
             onChange={onFileChange}
             style={{ display: 'none' }}
           />

package/src/views/ImportConversationView/index.tsx

@@ -1,6 +1,7 @@
 import type { AdminViewServerProps } from 'payload'
 import { DefaultTemplate } from '@payloadcms/next/templates'
 import { redirect } from 'next/navigation'
+import { supportViewRedirectTarget } from '../shared/viewAccess.js'
 import React from 'react'
 import { AdminErrorBoundary } from '../shared/ErrorBoundary'
 import { ImportConversationClient } from './client'
@@ -8,9 +9,8 @@ import { ImportConversationClient } from './client'
 export const ImportConversationView: React.FC<AdminViewServerProps> = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult
 
-  if (!req.user) {
-    redirect('/admin/login')
-  }
+  const redirectTo = supportViewRedirectTarget(initPageResult)
+  if (redirectTo) redirect(redirectTo)
 
   return (
     <DefaultTemplate
@@ -20,7 +20,7 @@ export const ImportConversationView: React.FC<AdminViewServerProps> = ({ initPag
       payload={req.payload}
       permissions={initPageResult.permissions}
       searchParams={{}}
-      user={req.user}
+      user={req.user ?? undefined}
       visibleEntities={visibleEntities}
     >
       <AdminErrorBoundary viewName="ImportConversationView">

package/src/views/LogsView/client.tsx

@@ -131,7 +131,7 @@ export const LogsClient: React.FC = () => {
                 </td>
                 <td className={s.truncate} title={log.recipientEmail}>{log.recipientEmail || '—'}</td>
                 <td className={s.truncate} title={log.subject}>{log.subject || '—'}</td>
-                <td style={{ fontSize: 12, color: 'var(--theme-elevation-500)' }}>{log.action || '—'}</td>
+                <td style={{ fontSize: 12, color: 'var(--theme-elevation-650)' }}>{log.action || '—'}</td>
                 <td style={{ textAlign: 'right' }}>
                   {log.processingTimeMs != null ? (
                     <span className={s.mono} style={{ color: log.processingTimeMs > 2000 ? '#dc2626' : log.processingTimeMs > 500 ? '#d97706' : '#16a34a' }}>

package/src/views/LogsView/index.tsx

@@ -1,13 +1,15 @@
 import type { AdminViewServerProps } from 'payload'
 import { DefaultTemplate } from '@payloadcms/next/templates'
 import { redirect } from 'next/navigation'
+import { supportViewRedirectTarget } from '../shared/viewAccess.js'
 import React from 'react'
 import { AdminErrorBoundary } from '../shared/ErrorBoundary'
 import { LogsClient } from './client'
 
 export const LogsView: React.FC<AdminViewServerProps> = ({ initPageResult }) => {
   const { req, visibleEntities } = initPageResult
-  if (!req.user) redirect('/admin/login')
+  const redirectTo = supportViewRedirectTarget(initPageResult)
+  if (redirectTo) redirect(redirectTo)
 
   return (
     <DefaultTemplate
@@ -17,7 +19,7 @@ export const LogsView: React.FC<AdminViewServerProps> = ({ initPageResult }) =>
       payload={req.payload}
       permissions={initPageResult.permissions}
       searchParams={{}}
-      user={req.user}
+      user={req.user ?? undefined}
       visibleEntities={visibleEntities}
     >
       <AdminErrorBoundary viewName="LogsView">