From 983bc21ea7128c907e9585372798066eda66eb49 Mon Sep 17 00:00:00 2001
From: michele <michele@netgescon.local>
Date: Fri, 28 Aug 2026 12:32:59 +0200
Subject: [PATCH] fix(auth): provision michele@nethome.it as SuperAdmin,
 restrict SuperAdmin navigation strictly to super-admin role, add registration
 link to login page, and align Adminer password fallback (task-d095b0e23b)

---
 app/Filament/Pages/SuperAdmin/Amministratori.php      |  2 +-
 app/Filament/Pages/SuperAdmin/Utenti.php              |  5 +----
 app/Providers/Filament/AdminFilamentPanelProvider.php | 10 ++++++++++
 public/adminer.php                                    |  8 ++++----
 4 files changed, 16 insertions(+), 9 deletions(-)

diff --git a/app/Filament/Pages/SuperAdmin/Amministratori.php b/app/Filament/Pages/SuperAdmin/Amministratori.php
index 2d40fd2..abd0534 100755
--- a/app/Filament/Pages/SuperAdmin/Amministratori.php
+++ b/app/Filament/Pages/SuperAdmin/Amministratori.php
@@ -57,7 +57,7 @@ public static function canAccess(): bool
         $user = Auth::user();
 
         return $user instanceof User
-            && $user->hasAnyRole(['super-admin', 'admin'])
+            && $user->hasRole('super-admin')
             && Schema::hasTable('amministratori');
     }
 
diff --git a/app/Filament/Pages/SuperAdmin/Utenti.php b/app/Filament/Pages/SuperAdmin/Utenti.php
index de8b06c..9e548f1 100755
--- a/app/Filament/Pages/SuperAdmin/Utenti.php
+++ b/app/Filament/Pages/SuperAdmin/Utenti.php
@@ -47,10 +47,7 @@ public static function canAccess(): bool
     {
         $user = Auth::user();
         return $user instanceof User
-            && (
-            $user->hasAnyRole(['super-admin', 'admin', 'amministratore'])
-            || $user->can('manage-users')
-        );
+            && $user->hasRole('super-admin');
     }
 
     public function mount(): void
diff --git a/app/Providers/Filament/AdminFilamentPanelProvider.php b/app/Providers/Filament/AdminFilamentPanelProvider.php
index f8df211..a65dd1d 100755
--- a/app/Providers/Filament/AdminFilamentPanelProvider.php
+++ b/app/Providers/Filament/AdminFilamentPanelProvider.php
@@ -47,6 +47,16 @@ public function panel(Panel $panel): Panel
             ])
             ->viteTheme('resources/css/filament/admin/theme.css')
             ->renderHook(PanelsRenderHook::HEAD_END, fn() => view('filament.components.legacy-admin-assets'))
+            ->renderHook(PanelsRenderHook::AUTH_LOGIN_FORM_BEFORE, fn() => new \Illuminate\Support\HtmlString('
+                <div class="mb-4 rounded-xl border border-amber-300 bg-amber-50 p-3.5 text-center text-xs text-amber-900 shadow-sm">
+                    <span class="font-bold text-amber-800">✨ Nuova registrazione utente?</span>
+                    <div class="mt-1">
+                        <a href="/admin-filament/register" class="inline-flex items-center gap-1 rounded-lg bg-amber-600 px-3 py-1.5 font-bold text-white shadow hover:bg-amber-500 transition">
+                            📝 REGISTRATI SUBITO A NETGESCON
+                        </a>
+                    </div>
+                </div>
+            '))
             ->renderHook(PanelsRenderHook::TOPBAR_LOGO_AFTER, fn() => view('filament.components.topbar-context'))
             ->renderHook(PanelsRenderHook::TOPBAR_LOGO_AFTER, fn() => view('filament.components.topbar-live-call'))
             ->renderHook(PanelsRenderHook::USER_MENU_BEFORE, fn() => view('filament.components.topbar-icons'))
diff --git a/public/adminer.php b/public/adminer.php
index 91f2171..e870f3e 100644
--- a/public/adminer.php
+++ b/public/adminer.php
@@ -61,8 +61,8 @@ function credentials() {
             if ($dbHost === "localhost") {
                 $dbHost = "127.0.0.1";
             }
-            $dbUser = env_get_val("DB_USERNAME", "netgescon");
-            $dbPass = env_get_val("DB_PASSWORD", "netgescon_pass");
+            $dbUser = env_get_val("DB_USERNAME", "netgescon_user");
+            $dbPass = env_get_val("DB_PASSWORD", "NetGescon2024!");
 
             return array($dbHost, $dbUser, $dbPass);
         }
@@ -78,8 +78,8 @@ function login($login, $password) {
         function loginForm() {
             $connection = env_get_val("DB_CONNECTION", "mysql");
             $driverVal  = ($connection === "pgsql") ? "pgsql" : "server";
-            $dbUser     = env_get_val("DB_USERNAME", "netgescon");
-            $dbPass     = env_get_val("DB_PASSWORD", "netgescon_pass");
+            $dbUser     = env_get_val("DB_USERNAME", "netgescon_user");
+            $dbPass     = env_get_val("DB_PASSWORD", "NetGescon2024!");
             $dbName     = env_get_val("DB_DATABASE", "netgescon");
 
             echo '<div style="background:#1e293b; color:#f8fafc; padding:16px; border-radius:10px; margin-bottom:15px; font-family:sans-serif; font-size:13px; line-height:1.5; border:1px solid #334155;">';