selected-users sidebar mode and panel language override

Author: TSA3000

CHANGELOG.md

@@ -1,15 +1,32 @@
 # Changelog
 
+## [0.2.19-beta2] — 2026-05-30
+
+Beta release. Two additions: a new 'Selected users' sidebar visibility mode, and a panel UI language override.
+
+**Sidebar panel visibility**
+
+- New `selected_users` mode. The Sidebar panel dropdown now reads: Admins only / Selected users / Everyone / Hidden.
+- New `Selected users for sidebar` multi-select field in the install + reconfigure flows. Picks which HA users can access the panel when the mode is `selected_users`. Owner is implicitly allowed (pre-checked + stripped on save).
+- Implementation: HA's `frontend.async_register_built_in_panel` only takes `require_admin: bool` — no per-user allowlist at the platform layer. In `selected_users` mode, the panel registers with `require_admin=False` and the panel.js side reads the allowlist from the registration config and gates the body client-side. The sidebar entry is visible to all users in this mode; non-allowed users see an access-denied placeholder when they click through.
+- `CONF_PANEL_SELECTED_USERS` is added to `_RELOAD_REQUIRING_KEYS` so changes take effect on save.
+
+**Panel UI language**
+
+- New `Panel language` field in the install + reconfigure flows. Options: `auto` (default, follows each user's HA language), `en`, `sv`.
+- `panel.js` resolves the effective language on render and looks up its hardcoded strings against a translation table. The most-visible strings are covered in this beta: bulk action buttons (Take all / Take due / Take missed), Saving spinner, modal section titles (Identity / Notes / Codes / Visibility / Prescriptions), modal buttons (Save / Cancel / Delete / + Add prescription), Add medicine label, Undo, loading/empty/access-denied placeholders. Status badges, schedule descriptions, and detailed form hints are not yet translated and stay English regardless of language setting — they remain a TODO for the next beta.
+- HA-managed translations (the config flow forms) follow each user's HA language natively and are unaffected by this setting.
+
 ## [0.2.19-beta1] — 2026-05-30
 
-Beta release. Access control: per-medicine visibility.
+Beta release. Per-medicine visibility.
 
 - New per-medicine `visibility` setting with four modes: `everyone` (default), `linked_person`, `admins_only`, `specific_users`. Owner and managers always pass regardless of mode — visibility is the gate for everyone else.
 - Visibility section added to the panel's Add and Edit medicine modal. When `specific_users` is selected, a multi-select of HA users (lazy-fetched via the new `pillpilot/get_users` WS endpoint) appears with the owner pre-checked as an informational hint.
 - Panel filters its rendering through `_canSeeMedicine`. The `_getMedicines` cache key now includes the current user_id so the filter result invalidates when sessions change.
 - WS mutating commands (`update_medicine`, `delete_medicine`) carry a new `@_require_can_see_medicine` decorator stacked after `@_require_manager`. Both must pass: a manager who can't see the medicine cannot edit it either.
 - Backend strips owner_id from `visibility_users` on save (v0.2.18 pattern applied here too). Owner remains implicitly allowed via `user.is_owner`.
-- Sensors stay globally readable — HA's entity registry permissions are admin / non-admin only, so per-user filtering is panel-level. Sensor gating for hard privacy is Tier 3, deferred.
+- Sensors stay globally readable — HA's entity registry permissions are admin / non-admin only, so per-user filtering is panel-level. Sensor gating for hard privacy is deferred.
 - HA Settings reconfigure flow does not yet expose visibility — panel-only for this beta. Pre-v0.2.19 medicines keep `everyone` as their effective mode.
 - New constants in `const.py`: `CONF_MED_VISIBILITY`, `CONF_MED_VISIBILITY_USERS`, `VIS_EVERYONE`, `VIS_LINKED_PERSON`, `VIS_ADMINS_ONLY`, `VIS_SPECIFIC_USERS`, `DEFAULT_MED_VISIBILITY`, `MED_VISIBILITY_OPTIONS`.
 

RELEASE_NOTES.md

@@ -1,28 +1,34 @@
-# v0.2.19-beta1
+# v0.2.19-beta2
 
-Beta release. Access control: per-medicine visibility.
+Beta release. Two additions: a fourth sidebar visibility mode and a panel UI language override.
 
-## What's new
+## Sidebar panel visibility
 
-Each medicine now has a **Visibility** setting in the panel's Add and Edit modal. Four modes:
+The Sidebar panel dropdown in Settings → Devices & services → PillPilot → Configure now reads:
 
-- **Everyone** — default, backward-compat with pre-v0.2.19 medicines. Anyone with panel access can see and (if a manager) edit.
-- **Linked person only** — only the HA users whose person entity is the `person_id` of any prescription on this medicine, plus owner and managers.
-- **Admins only** — only owner, managers, and HA admins.
-- **Specific users** — explicit allowlist. A multi-select of HA users appears beneath the mode dropdown; pick the ones who should see the medicine. Owner is pre-checked as an informational hint (owner always has access regardless) and stripped from the stored list on save.
+- **Admins only** — only HA admins see the sidebar entry.
+- **Selected users** — only HA users on the new allowlist see the useful panel content. Owner always has access.
+- **Everyone** — anyone with PillPilot access sees the sidebar entry.
+- **Hidden** — panel not registered at all.
 
-Owner and managers always have access regardless of mode — visibility is the gate for everyone else.
+When `Selected users` is picked, a multi-select user list appears under the dropdown. Add the users you want to grant access to. The owner is pre-checked as an informational hint (owner always has access regardless) and stripped from the stored list on save.
 
-Mutating WS commands (`update_medicine`, `delete_medicine`) now check both manager status and visibility. A manager who can't see a medicine cannot edit it via the WS either.
+**Platform limitation worth noting.** Home Assistant's panel registration API does not support per-user allowlists at the frontend layer — a panel is either registered (visible to everyone or admins-only) or not registered at all. The `Selected users` mode works around this by registering the panel for everyone and gating the panel body client-side in `panel.js`. The sidebar entry itself is visible to all users in this mode; clicking it as a non-allowed user shows an access-denied placeholder instead of the medicines view. The mutating WS commands (`create_medicine`, `update_medicine`, `delete_medicine`) remain gated server-side and aren't affected by this limitation.
 
-## Known limitations
+## Panel UI language
 
-Sensors stay globally readable. Any HA user with access to Developer Tools can still read the sensor state of a restricted medicine. That's a Home Assistant platform limitation — entity registry permissions are admin / non-admin only, no per-user filtering. Tier 2 stops at panel-level visibility. Sensor gating (skip creating sensors for restricted medicines) is Tier 3 and deferred.
+New **Panel language** field in the Configure form. Three options:
 
-HA Settings reconfigure flow does not yet expose visibility. Panel-only for this beta. Visibility can only be set via the Add / Edit medicine modal in the panel.
+- **Auto** (default) — follows each user's HA language at render time.
+- **English** — force English regardless of HA locale.
+- **Svenska** — force Swedish regardless of HA locale.
+
+The most-visible panel strings are translated in this beta: bulk action buttons (Take all / Take due / Take missed), Saving spinner, modal section titles, modal buttons (Save / Cancel / Delete / Add prescription), and loading / empty / access-denied placeholders. Status badges (Due / Taken / Missed / etc), schedule descriptions, and detailed form hints are not yet translated and stay English for now — TODO for the next beta.
+
+The Configure form translations (the labels for each field) follow HA's normal translation system and respect each user's HA locale automatically.
 
 ## Upgrading
 
-Replace the `pillpilot` directory in `custom_components/` with the contents of this zip and restart Home Assistant. HACS users on the beta channel: update normally. Hard-reload the panel (Ctrl+Shift+R) — HACS doesn't bust the browser cache of `panel.js`.
+Replace the `pillpilot` directory in `custom_components/` with the contents of this zip and restart Home Assistant. Hard-reload the panel (Ctrl+Shift+R) — the `?v=...` query string on the panel.js URL should bust the cache, but a hard reload guarantees it.
 
-Pre-v0.2.19 medicines keep their current behavior — `everyone` is the effective mode until you edit a medicine and pick a different one.
+No data migration. Existing installs keep their current sidebar visibility setting and default to `Auto` language. Pre-v0.2.19 medicines keep `Everyone` visibility.

custom_components/pillpilot/__init__.py

@@ -15,11 +15,13 @@
 from homeassistant.helpers.aiohttp_client import async_get_clientsession
 
 from .const import (
+    CONF_LANGUAGE,
     CONF_MANAGERS,
     CONF_MED_ATC_CODE,
     CONF_MED_PERSON,
     CONF_MED_VISIBILITY,
     CONF_MED_VISIBILITY_USERS,
+    CONF_PANEL_SELECTED_USERS,
     CONF_MED_ID,
     CONF_MED_NAME,
     CONF_MED_NPL_ID,
@@ -388,7 +390,12 @@ async def async_setup_entry(hass: HomeAssistant, entry: ConfigEntry) -> bool:
 # panel, etc.). Everything else can be picked up by the coordinator
 # without unloading. v0.2.18 adds CONF_MANAGERS — switching the
 # allowlist needs the WS handler's resolved entry to be re-read.
-_RELOAD_REQUIRING_KEYS = (CONF_PANEL_VISIBILITY, CONF_MANAGERS)
+_RELOAD_REQUIRING_KEYS = (
+    CONF_PANEL_VISIBILITY,
+    CONF_PANEL_SELECTED_USERS,
+    CONF_MANAGERS,
+    CONF_LANGUAGE,
+)
 
 
 def _reload_keys_snapshot(entry: ConfigEntry) -> tuple:

custom_components/pillpilot/config_flow.py

@@ -81,8 +81,12 @@
     CONF_MED_VARUNUMMER,
     CONF_MEDICINES_DB_REFRESH_NOW,
     CONF_MEDICINES_DB_URL,
+    CONF_LANGUAGE,
     CONF_MANAGERS,
+    CONF_PANEL_SELECTED_USERS,
     CONF_PANEL_VISIBILITY,
+    DEFAULT_LANGUAGE,
+    LANGUAGE_OPTIONS,
     DEFAULT_PANEL_VISIBILITY,
     DEFAULT_REMIND_WINDOW,
     DOMAIN,
@@ -1142,6 +1146,14 @@ async def async_step_user(
             if owner_id and owner_id in managers_selected:
                 managers_selected = [u for u in managers_selected if u != owner_id]
             self._draft[CONF_MANAGERS] = managers_selected
+            # Panel-side selected users — same owner-strip pattern.
+            panel_users = list(user_input.get(CONF_PANEL_SELECTED_USERS) or [])
+            if owner_id and owner_id in panel_users:
+                panel_users = [u for u in panel_users if u != owner_id]
+            self._draft[CONF_PANEL_SELECTED_USERS] = panel_users
+            self._draft[CONF_LANGUAGE] = (
+                user_input.get(CONF_LANGUAGE) or DEFAULT_LANGUAGE
+            )
             self._draft[CONF_MEDICINES_DB_URL] = (
                 user_input.get(CONF_MEDICINES_DB_URL) or DEFAULT_MEDICINES_DB_URL
             )
@@ -1172,6 +1184,26 @@ async def async_step_user(
                             mode=SelectSelectorMode.LIST,
                         )
                     ),
+                    vol.Optional(
+                        CONF_PANEL_SELECTED_USERS,
+                        default=default_managers,
+                    ): SelectSelector(
+                        SelectSelectorConfig(
+                            options=manager_options,
+                            multiple=True,
+                            mode=SelectSelectorMode.LIST,
+                        )
+                    ),
+                    vol.Required(
+                        CONF_LANGUAGE,
+                        default=DEFAULT_LANGUAGE,
+                    ): SelectSelector(
+                        SelectSelectorConfig(
+                            options=LANGUAGE_OPTIONS,
+                            translation_key="language",
+                            mode=SelectSelectorMode.DROPDOWN,
+                        )
+                    ),
                     vol.Optional(
                         CONF_MEDICINES_DB_URL,
                         default=DEFAULT_MEDICINES_DB_URL,
@@ -1224,6 +1256,13 @@ async def async_step_reconfigure(
             if owner_id and owner_id in managers_selected:
                 managers_selected = [u for u in managers_selected if u != owner_id]
             self._draft[CONF_MANAGERS] = managers_selected
+            panel_users = list(user_input.get(CONF_PANEL_SELECTED_USERS) or [])
+            if owner_id and owner_id in panel_users:
+                panel_users = [u for u in panel_users if u != owner_id]
+            self._draft[CONF_PANEL_SELECTED_USERS] = panel_users
+            self._draft[CONF_LANGUAGE] = (
+                user_input.get(CONF_LANGUAGE) or DEFAULT_LANGUAGE
+            )
             self._draft[CONF_MEDICINES_DB_URL] = (
                 user_input.get(CONF_MEDICINES_DB_URL) or DEFAULT_MEDICINES_DB_URL
             )
@@ -1243,6 +1282,13 @@ async def async_step_reconfigure(
         default_managers = list(stored_managers)
         if owner_id and owner_id not in default_managers:
             default_managers.insert(0, owner_id)
+        # Same pattern for the panel selected-users list.
+        stored_panel_users = list(
+            existing.data.get(CONF_PANEL_SELECTED_USERS) or []
+        )
+        default_panel_users = list(stored_panel_users)
+        if owner_id and owner_id not in default_panel_users:
+            default_panel_users.insert(0, owner_id)
         return self.async_show_form(
             step_id="reconfigure",
             description_placeholders={
@@ -1277,6 +1323,28 @@ async def async_step_reconfigure(
                             mode=SelectSelectorMode.LIST,
                         )
                     ),
+                    vol.Optional(
+                        CONF_PANEL_SELECTED_USERS,
+                        default=default_panel_users,
+                    ): SelectSelector(
+                        SelectSelectorConfig(
+                            options=manager_options,
+                            multiple=True,
+                            mode=SelectSelectorMode.LIST,
+                        )
+                    ),
+                    vol.Required(
+                        CONF_LANGUAGE,
+                        default=existing.data.get(
+                            CONF_LANGUAGE, DEFAULT_LANGUAGE
+                        ),
+                    ): SelectSelector(
+                        SelectSelectorConfig(
+                            options=LANGUAGE_OPTIONS,
+                            translation_key="language",
+                            mode=SelectSelectorMode.DROPDOWN,
+                        )
+                    ),
                     vol.Optional(
                         CONF_MEDICINES_DB_URL,
                         default=existing.data.get(

custom_components/pillpilot/const.py

@@ -163,20 +163,29 @@
 STATE_SNOOZED = "snoozed"
 
 # ---------------------------------------------------------------------------
-# Sidebar panel visibility (added in v0.2.3)
+# Sidebar panel visibility (added in v0.2.3, expanded in v0.2.19)
 #
 # Stored in entry.data[CONF_PANEL_VISIBILITY]. Defaults to "everyone" for
-# entries that pre-date this feature, so existing v0.2.1/v0.2.2 installs
-# keep the same behavior they had before.
+# entries that pre-date this feature, so older installs keep their behavior.
+#
+# HA's frontend.async_register_built_in_panel takes require_admin: bool
+# only — there's no per-user panel registration. The "selected_users" mode
+# works around this by registering the panel for everyone and gating the
+# panel body client-side in panel.js. The sidebar entry is still visible
+# to all users in that mode; clicking it as a non-allowed user shows an
+# access-denied placeholder instead of the medicines view.
 # ---------------------------------------------------------------------------
 CONF_PANEL_VISIBILITY = "panel_visibility"
-PANEL_VIS_EVERYONE = "everyone"   # registered, require_admin=False
-PANEL_VIS_ADMINS = "admins"       # registered, require_admin=True
-PANEL_VIS_HIDDEN = "hidden"       # not registered at all
+CONF_PANEL_SELECTED_USERS = "panel_selected_users"
+PANEL_VIS_EVERYONE = "everyone"               # registered, require_admin=False
+PANEL_VIS_ADMINS = "admins"                   # registered, require_admin=True
+PANEL_VIS_SELECTED_USERS = "selected_users"   # registered for everyone; panel.js gates
+PANEL_VIS_HIDDEN = "hidden"                   # not registered at all
 DEFAULT_PANEL_VISIBILITY = PANEL_VIS_EVERYONE
 PANEL_VISIBILITY_OPTIONS = [
-    PANEL_VIS_EVERYONE,
     PANEL_VIS_ADMINS,
+    PANEL_VIS_SELECTED_USERS,
+    PANEL_VIS_EVERYONE,
     PANEL_VIS_HIDDEN,
 ]
 
@@ -201,7 +210,9 @@
 # medicine in the panel and who can mutate it via the WS commands.
 # Sensors stay global — HA's entity-registry permissions are admin/non-admin
 # only, so a non-allowed user can still read sensor state via Developer
-# Tools. Tier 2 stops at panel-level visibility; sensor gating is Tier 3.
+# Tools. This setting is panel-level only; entity-level gating would
+# require skipping sensor creation for restricted medicines and is not
+# part of this release.
 #
 # Modes:
 #   * everyone        — default. Backward-compat for pre-v0.2.19 entries
@@ -227,3 +238,22 @@
     VIS_ADMINS_ONLY,
     VIS_SPECIFIC_USERS,
 ]
+
+# ---------------------------------------------------------------------------
+# Panel UI language override (added in v0.2.19)
+#
+# Stored in entry.data[CONF_LANGUAGE]. Controls which translations the
+# panel.js side uses for its hardcoded strings (bulk action buttons,
+# status badges, modal section titles, etc). "auto" resolves to the
+# current user's HA language at render time; "en" and "sv" override it.
+#
+# The HA-managed translations (strings.json / translations/en.json /
+# translations/sv.json) cover the config flow forms — those follow each
+# user's HA locale natively and are unaffected by this setting.
+# ---------------------------------------------------------------------------
+CONF_LANGUAGE = "language"
+LANG_AUTO = "auto"
+LANG_EN = "en"
+LANG_SV = "sv"
+DEFAULT_LANGUAGE = LANG_AUTO
+LANGUAGE_OPTIONS = [LANG_AUTO, LANG_EN, LANG_SV]