From 8a4968d3fd6b2cc352f44bb0f4f7a81617b2a82e Mon Sep 17 00:00:00 2001
From: Harsh Mahajan <harshmahajan2345@gmail.com>
Date: Mon, 23 Mar 2026 12:13:15 +0530
Subject: [PATCH] feat: new user impersonation card

---
 src/lib/actions/analytics.ts                  |  1 +
 .../auth/user-[user]/+page.svelte             |  2 +
 .../user-[user]/updateImpersonation.svelte    | 90 +++++++++++++++++++
 3 files changed, 93 insertions(+)
 create mode 100644 src/routes/(console)/project-[region]-[project]/auth/user-[user]/updateImpersonation.svelte

diff --git a/src/lib/actions/analytics.ts b/src/lib/actions/analytics.ts
index 50afee2ab..0aeb6bc73 100644
--- a/src/lib/actions/analytics.ts
+++ b/src/lib/actions/analytics.ts
@@ -235,6 +235,7 @@ export enum Submit {
     UserUpdatePassword = 'submit_user_update_password',
     UserUpdatePhone = 'submit_user_update_phone',
     UserUpdateMfa = 'submit_user_update_mfa',
+    UserUpdateImpersonation = 'submit_user_update_impersonation',
     UserUpdatePreferences = 'submit_user_update_preferences',
     UserUpdateStatus = 'submit_user_update_status',
     UserUpdateVerificationEmail = 'submit_user_update_verification_email',
diff --git a/src/routes/(console)/project-[region]-[project]/auth/user-[user]/+page.svelte b/src/routes/(console)/project-[region]-[project]/auth/user-[user]/+page.svelte
index 8473dbf7a..d44919cef 100644
--- a/src/routes/(console)/project-[region]-[project]/auth/user-[user]/+page.svelte
+++ b/src/routes/(console)/project-[region]-[project]/auth/user-[user]/+page.svelte
@@ -7,6 +7,7 @@
     import UpdateName from './updateName.svelte';
     import UpdatePassword from './updatePassword.svelte';
     import UpdatePhone from './updatePhone.svelte';
+    import UpdateImpersonation from './updateImpersonation.svelte';
     import UpdatePrefs from './updatePrefs.svelte';
     import UpdateStatus from './updateStatus.svelte';
     import type { PageData } from './$types';
@@ -22,6 +23,7 @@
     <UpdatePassword />
     <UpdateLabels />
     <UpdatePrefs />
+    <UpdateImpersonation />
     <UpdateMfa />
     <DangerZone project={data.project} />
 </Container>
diff --git a/src/routes/(console)/project-[region]-[project]/auth/user-[user]/updateImpersonation.svelte b/src/routes/(console)/project-[region]-[project]/auth/user-[user]/updateImpersonation.svelte
new file mode 100644
index 000000000..31c327ed3
--- /dev/null
+++ b/src/routes/(console)/project-[region]-[project]/auth/user-[user]/updateImpersonation.svelte
@@ -0,0 +1,90 @@
+<script lang="ts">
+    import { invalidate } from '$app/navigation';
+    import { page } from '$app/state';
+    import { Submit, trackError, trackEvent } from '$lib/actions/analytics';
+    import { CardGrid } from '$lib/components';
+    import { Dependencies } from '$lib/constants';
+    import { addNotification } from '$lib/stores/notifications';
+    import { sdk } from '$lib/stores/sdk';
+    import { Alert, Layout, Link, Selector } from '@appwrite.io/pink-svelte';
+    import type { Models } from '@appwrite.io/console';
+    import { user } from './store';
+
+    type UserWithImpersonation = Models.User<Record<string, string>> & {
+        impersonation?: boolean;
+    };
+
+    type UsersWithImpersonationApi = {
+        updateImpersonation(params: {
+            userId: string;
+            impersonation: boolean;
+        }): Promise<UserWithImpersonation>;
+    };
+
+    let impersonation = false;
+    let lastLoadedUserId: string = null;
+
+    // TODO: Remove this cast once the installed console SDK exposes impersonation types.
+    $: currentImpersonation = Boolean(($user as UserWithImpersonation)?.impersonation);
+
+    $: if ($user?.$id && $user.$id !== lastLoadedUserId) {
+        impersonation = currentImpersonation;
+        lastLoadedUserId = $user.$id;
+    }
+
+    async function updateImpersonation() {
+        try {
+            await (
+                sdk.forProject(page.params.region, page.params.project)
+                    .users as unknown as UsersWithImpersonationApi
+            ).updateImpersonation({
+                userId: $user.$id,
+                impersonation
+            });
+
+            await invalidate(Dependencies.USER);
+
+            addNotification({
+                message: `Impersonation capability has been ${impersonation ? 'enabled' : 'disabled'}`,
+                type: 'success'
+            });
+            trackEvent(Submit.UserUpdateImpersonation);
+        } catch (error) {
+            impersonation = currentImpersonation;
+
+            addNotification({
+                message: error.message,
+                type: 'error'
+            });
+            trackError(error, Submit.UserUpdateImpersonation);
+        }
+    }
+</script>
+
+<CardGrid hideFooter>
+    <svelte:fragment slot="title">User impersonation</svelte:fragment>
+    Control whether this user can impersonate other users through your app using the Appwrite Client SDK&apos;s
+    impersonation support.
+    <Link.Anchor
+        target="_blank"
+        rel="noopener noreferrer"
+        href="https://appwrite.io/docs/products/auth">
+        Documentation
+    </Link.Anchor>
+    <svelte:fragment slot="aside">
+        <Layout.Stack gap="m">
+            <Selector.Switch
+                id="user-impersonation"
+                bind:checked={impersonation}
+                label="Impersonation capability"
+                description={`This user ${impersonation ? 'can' : 'cannot'} impersonate others`}
+                on:change={updateImpersonation} />
+
+            <Alert.Inline status="info" title="Note">
+                Grant this only for trusted operator or support-style accounts. Audit logs still
+                attribute actions to the account that started impersonation, not only the
+                impersonated user.
+            </Alert.Inline>
+        </Layout.Stack>
+    </svelte:fragment>
+</CardGrid>