From 61fcf7f699b7a77e90e6580cd9f925b227a0275c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Miroslav=20=C5=A0ediv=C3=BD?= <sedivy.miro@gmail.com>
Date: Tue, 16 Nov 2021 22:50:11 +0100
Subject: [PATCH] add lock controls for users.

---
 client/src/components/chat.vue            |  2 +-
 client/src/components/controls.vue        | 24 ++++++----
 client/src/components/header.vue          | 54 ++++++++++++++++-------
 client/src/components/video.vue           |  2 +-
 client/src/locale/en-us.ts                | 25 ++++++++---
 client/src/locale/es-sp.ts                | 27 +++++++++---
 client/src/locale/fr-fr.ts                | 27 +++++++++---
 client/src/locale/nb-no.ts                | 27 +++++++++---
 client/src/locale/sk-sk.ts                | 26 ++++++++---
 client/src/locale/sv-se.ts                | 27 +++++++++---
 client/src/neko/index.ts                  | 15 ++++---
 client/src/neko/messages.ts               | 12 +++++
 client/src/store/index.ts                 | 19 +++++---
 docs/changelog.md                         |  3 ++
 server/internal/types/message/messages.go |  6 +++
 server/internal/websocket/admin.go        | 37 ++++++++++------
 server/internal/websocket/control.go      | 15 ++++++-
 server/internal/websocket/handler.go      | 17 +++++--
 server/internal/websocket/session.go      | 23 +++++-----
 server/internal/websocket/websocket.go    |  2 +-
 20 files changed, 277 insertions(+), 113 deletions(-)

diff --git a/client/src/components/chat.vue b/client/src/components/chat.vue
index 166bc653..c8e127de 100644
--- a/client/src/components/chat.vue
+++ b/client/src/components/chat.vue
@@ -404,7 +404,7 @@
     }
 
     member(id: string) {
-      return this.$accessor.user.members[id]
+      return this.$accessor.user.members[id] || { id, displayname: this.$t('somebody') }
     }
 
     timestamp(time: Date) {
diff --git a/client/src/components/controls.vue b/client/src/components/controls.vue
index d7296c7e..bac9ec91 100644
--- a/client/src/components/controls.vue
+++ b/client/src/components/controls.vue
@@ -1,17 +1,17 @@
 <template>
   <ul>
-    <li v-if="!isTouch">
+    <li v-if="!isTouch && seesControl">
       <i
         :class="[
-          shakeKbd ? 'shake' : '',
-          hosted && !hosting ? 'disabled' : '',
-          !hosted && !hosting ? 'faded' : '',
+          !disabeld && shakeKbd ? 'shake' : '',
+          disabeld && !hosting ? 'disabled' : '',
+          !disabeld && !hosting ? 'faded' : '',
           'fas',
           'fa-keyboard',
           'request',
         ]"
         v-tooltip="{
-          content: !hosted || hosting ? (hosting ? $t('controls.release') : $t('controls.request')) : '',
+          content: !disabeld || hosting ? (hosting ? $t('controls.release') : $t('controls.request')) : '',
           placement: 'top',
           offset: 5,
           boundariesElement: 'body',
@@ -20,7 +20,7 @@
         @click.stop.prevent="toggleControl"
       />
     </li>
-    <li>
+    <li v-if="seesControl">
       <label
         class="switch"
         v-tooltip="{
@@ -240,7 +240,7 @@
 
   @Component({ name: 'neko-controls' })
   export default class extends Vue {
-    @Prop(Boolean) readonly shakeKbd = false
+    @Prop(Boolean) readonly shakeKbd!: boolean
 
     get isTouch() {
       return (
@@ -249,7 +249,15 @@
       )
     }
 
-    get hosted() {
+    get severLocked(): boolean {
+      return 'control' in this.$accessor.locked && this.$accessor.locked['control']
+    }
+
+    get seesControl(): boolean {
+      return !this.severLocked || this.$accessor.user.admin || this.hosting
+    }
+
+    get disabeld() {
       return this.$accessor.remote.hosted
     }
 
diff --git a/client/src/components/header.vue b/client/src/components/header.vue
index 60eeac50..7db5e10c 100644
--- a/client/src/components/header.vue
+++ b/client/src/components/header.vue
@@ -7,16 +7,23 @@
     <ul class="menu">
       <li>
         <i
-          :class="[{ disabled: !admin }, { 'fa-lock-open': !locked }, { 'fa-lock': locked }, 'fas', 'lock']"
-          @click="toggleLock"
+          :class="[{ disabled: !admin }, { locked: isLocked('control') }, 'fas', 'fa-mouse']"
+          @click="toggleLock('control')"
           v-tooltip="{
-            content: admin
-              ? locked
-                ? $t('room.unlock')
-                : $t('room.lock')
-              : locked
-              ? $t('room.locked')
-              : $t('room.unlocked'),
+            content: lockedTooltip('control'),
+            placement: 'bottom',
+            offset: 5,
+            boundariesElement: 'body',
+            delay: { show: 300, hide: 100 },
+          }"
+        />
+      </li>
+      <li>
+        <i
+          :class="[{ disabled: !admin }, { locked: isLocked('login') }, locked ? 'fa-lock' : 'fa-lock-open', 'fas']"
+          @click="toggleLock('login')"
+          v-tooltip="{
+            content: lockedTooltip('login'),
             placement: 'bottom',
             offset: 5,
             boundariesElement: 'body',
@@ -90,7 +97,7 @@
           opacity: 0.8;
         }
 
-        .fa-lock {
+        .locked {
           color: rgba($color: $style-error, $alpha: 0.5);
         }
 
@@ -138,6 +145,7 @@
 
 <script lang="ts">
   import { Component, Ref, Watch, Vue } from 'vue-property-decorator'
+  import { AdminLockResource } from '~/neko/messages'
 
   @Component({ name: 'neko-settings' })
   export default class extends Vue {
@@ -167,14 +175,26 @@
       this.readTexts = this.texts
     }
 
-    toggleLock() {
-      if (this.admin) {
-        if (this.locked) {
-          this.$accessor.unlock()
-        } else {
-          this.$accessor.lock()
-        }
+    toggleLock(resource: AdminLockResource) {
+      if (!this.admin) return
+
+      if (this.isLocked(resource)) {
+        this.$accessor.unlock(resource)
+      } else {
+        this.$accessor.lock(resource)
       }
     }
+
+    isLocked(resource: AdminLockResource): boolean {
+      return resource in this.locked && this.locked[resource]
+    }
+
+    lockedTooltip(resource: AdminLockResource) {
+      if (this.admin) {
+        return this.$t(`locks.${resource}.` + (this.isLocked(resource) ? `unlock` : `lock`))
+      }
+
+      return this.$t(`locks.${resource}.` + (this.isLocked(resource) ? `locked` : `unlocked`))
+    }
   }
 </script>
diff --git a/client/src/components/video.vue b/client/src/components/video.vue
index e583f016..d45e5885 100644
--- a/client/src/components/video.vue
+++ b/client/src/components/video.vue
@@ -213,7 +213,7 @@
     @Ref('resolution') readonly _resolution!: any
     @Ref('clipboard') readonly _clipboard!: any
 
-    @Prop(Boolean) readonly hideControls = false
+    @Prop(Boolean) readonly hideControls!: boolean
 
     private keyboard = GuacamoleKeyboard()
     private observer = new ResizeObserver(this.onResise.bind(this))
diff --git a/client/src/locale/en-us.ts b/client/src/locale/en-us.ts
index ee79e3d4..cce19ce5 100644
--- a/client/src/locale/en-us.ts
+++ b/client/src/locale/en-us.ts
@@ -2,6 +2,7 @@ export const logout = 'log out'
 export const unsupported = 'this web-browser does not support WebRTC'
 export const admin_loggedin = 'You are logged in as an admin'
 export const you = 'You'
+export const somebody = 'Somebody'
 export const send_a_message = 'Send a message'
 
 export const side = {
@@ -50,11 +51,23 @@ export const controls = {
   unlock: 'Unlock Controls',
 }
 
-export const room = {
-  lock: 'Lock Room (for users)',
-  unlock: 'Unlock Room (for users)',
-  locked: 'Room Locked (for users)',
-  unlocked: 'Room Unlocked (for users)',
+export const locks = {
+  control: {
+    lock: 'Lock Controls (for users)',
+    unlock: 'Unlock Controls (for users)',
+    locked: 'Controls Locked (for users)',
+    unlocked: 'Controls Unlocked (for users)',
+    notif_locked: 'locked controls for users',
+    notif_unlocked: 'unlocked controls for users',
+  },
+  login: {
+    lock: 'Lock Room (for users)',
+    unlock: 'Unlock Room (for users)',
+    locked: 'Room Locked (for users)',
+    unlocked: 'Room Unlocked (for users)',
+    notif_locked: 'locked the room',
+    notif_unlocked: 'unlocked the room',
+  },
 }
 
 export const setting = {
@@ -94,6 +107,4 @@ export const notifications = {
   kicked: 'kicked {name}',
   muted: 'muted {name}',
   unmuted: 'unmuted {name}',
-  room_locked: 'locked the room',
-  room_unlocked: 'unlocked the room',
 }
diff --git a/client/src/locale/es-sp.ts b/client/src/locale/es-sp.ts
index 8d2a5475..06846799 100644
--- a/client/src/locale/es-sp.ts
+++ b/client/src/locale/es-sp.ts
@@ -2,6 +2,8 @@ export const logout = 'salir'
 export const unsupported = 'este navegador no soporta webrtc'
 export const admin_loggedin = 'Registrado como admin'
 export const you = 'Tú'
+// TODO
+//export const somebody = 'Somebody'
 export const send_a_message = 'Enviar un mensaje'
 
 export const side = {
@@ -51,11 +53,24 @@ export const controls = {
   unlock: 'Controles desbloqueados',
 }
 
-export const room = {
-  lock: 'Bloquear sala (para usuarios)',
-  unlock: 'Desbloquear sala (para usuarios)',
-  locked: 'Sala bloqueada (para usuarios)',
-  unlocked: 'Sala desbloqueada (para usuarios)',
+export const locks = {
+  // TODO
+  //control: {
+  //  lock: 'Lock Controls (for users)',
+  //  unlock: 'Unlock Controls (for users)',
+  //  locked: 'Controls Locked (for users)',
+  //  unlocked: 'Controls Unlocked (for users)',
+  //  notif_locked: 'locked controls for users',
+  //  notif_unlocked: 'unlocked controls for users',
+  //},
+  login: {
+    lock: 'Bloquear sala (para usuarios)',
+    unlock: 'Desbloquear sala (para usuarios)',
+    locked: 'Sala bloqueada (para usuarios)',
+    unlocked: 'Sala desbloqueada (para usuarios)',
+    notif_locked: 'bloqueó la sala',
+    notif_unlocked: 'desbloqueó la sala',
+  },
 }
 
 export const setting = {
@@ -98,6 +113,4 @@ export const notifications = {
   kicked: '{name} expulsado',
   muted: '{name} silenciado',
   unmuted: '{name} no silenciado',
-  room_locked: 'bloqueó la sala',
-  room_unlocked: 'desbloqueó la sala',
 }
diff --git a/client/src/locale/fr-fr.ts b/client/src/locale/fr-fr.ts
index 1791d14b..2261c011 100644
--- a/client/src/locale/fr-fr.ts
+++ b/client/src/locale/fr-fr.ts
@@ -2,6 +2,8 @@ export const logout = 'Se déconnecter'
 export const unsupported = 'ce navigateur ne prend pas en charge WebRTC'
 export const admin_loggedin = "Vous êtes connecté en tant qu'admin"
 export const you = 'Vous'
+// TODO
+//export const somebody = 'Somebody'
 export const send_a_message = 'Envoyer un message'
 
 export const side = {
@@ -44,11 +46,24 @@ export const context = {
   },
 }
 
-export const controls = {
-  release: 'Relacher le contrôle',
-  request: 'Demander le contrôle',
-  lock: 'Vérouiller le contrôle',
-  unlock: 'Débloquer le contrôle',
+export const locks = {
+  // TODO
+  //control: {
+  //  lock: 'Lock Controls (for users)',
+  //  unlock: 'Unlock Controls (for users)',
+  //  locked: 'Controls Locked (for users)',
+  //  unlocked: 'Controls Unlocked (for users)',
+  //  notif_locked: 'locked controls for users',
+  //  notif_unlocked: 'unlocked controls for users',
+  //},
+  login: {
+    release: 'Relacher le contrôle',
+    request: 'Demander le contrôle',
+    lock: 'Vérouiller le contrôle',
+    unlock: 'Débloquer le contrôle',
+    notif_locked: 'a vérouillé la salle',
+    notif_unlocked: 'a dévérouillé la salle',
+  },
 }
 
 export const room = {
@@ -98,6 +113,4 @@ export const notifications = {
   kicked: 'a kick {name}',
   muted: 'a mute {name}',
   unmuted: 'a démute {name}',
-  room_locked: 'a vérouillé la salle',
-  room_unlocked: 'a dévérouillé la salle',
 }
diff --git a/client/src/locale/nb-no.ts b/client/src/locale/nb-no.ts
index 711e5591..9359b7ad 100644
--- a/client/src/locale/nb-no.ts
+++ b/client/src/locale/nb-no.ts
@@ -2,6 +2,8 @@ export const logout = 'logg ut'
 export const unsupported = 'Denne nettleseren støtter ikke WebRTC'
 export const admin_loggedin = 'Du er innlogget som administrator'
 export const you = 'Deg'
+// TODO
+//export const somebody = 'Somebody'
 export const send_a_message = 'Send en melding'
 
 export const side = {
@@ -51,11 +53,24 @@ export const controls = {
   unlock: 'Lås opp kontrollen',
 }
 
-export const room = {
-  lock: 'Lås rommet (for brukere)',
-  unlock: 'Lås opp rommet (for brukere)',
-  locked: 'Rom låst (for brukere)',
-  unlocked: 'Rom opplåst (for brukere)',
+export const locks = {
+  // TODO
+  //control: {
+  //  lock: 'Lock Controls (for users)',
+  //  unlock: 'Unlock Controls (for users)',
+  //  locked: 'Controls Locked (for users)',
+  //  unlocked: 'Controls Unlocked (for users)',
+  //  notif_locked: 'locked controls for users',
+  //  notif_unlocked: 'unlocked controls for users',
+  //},
+  login: {
+    lock: 'Lås rommet (for brukere)',
+    unlock: 'Lås opp rommet (for brukere)',
+    locked: 'Rom låst (for brukere)',
+    unlocked: 'Rom opplåst (for brukere)',
+    notif_locked: 'låste rommet',
+    notif_unlocked: 'låste opp rommet',
+  },
 }
 
 export const setting = {
@@ -98,6 +113,4 @@ export const notifications = {
   kicked: 'kastet ut {name}',
   muted: 'forstummet {name}',
   unmuted: 'opphevet forstummingen av {name}',
-  room_locked: 'låste rommet',
-  room_unlocked: 'låste opp rommet',
 }
diff --git a/client/src/locale/sk-sk.ts b/client/src/locale/sk-sk.ts
index 8f9e8d61..16116635 100644
--- a/client/src/locale/sk-sk.ts
+++ b/client/src/locale/sk-sk.ts
@@ -2,6 +2,8 @@ export const logout = 'odhlásiť sa'
 export const unsupported = 'tento prehliadač nepodporuje webrtc'
 export const admin_loggedin = 'Ste prihlásení/á ako administrátor'
 // export const you = '' // Incorrect in some translations! Cannot be used!
+// TODO
+//export const somebody = 'Somebody'
 export const send_a_message = 'Odoslať správu'
 
 export const side = {
@@ -51,11 +53,23 @@ export const controls = {
   unlock: 'Odomknúť ovládanie',
 }
 
-export const room = {
-  lock: 'Zamknúť miestnosť (pre používateľov)',
-  unlock: 'Odomknúť miestnosť (pre používateľov)',
-  locked: 'Miestnosť je zamknutá (pre používateľov)',
-  unlocked: 'Miestnosť odomknutá (pre používateľov)',
+export const locks = {
+  control: {
+    lock: 'Zakázať ovládanie (pre používateľov)',
+    unlock: 'Povoliť ovládanie (pre používateľov)',
+    locked: 'Ovládanie je zakázané (pre používateľov)',
+    unlocked: 'Ovládanie je povolené (pre používateľov)',
+    notif_locked: 'zakázal/a ovládanie pre používateľov',
+    notif_unlocked: 'povolil/a ovládanie pre používateľov',
+  },
+  login: {
+    lock: 'Zamknúť miestnosť (pre používateľov)',
+    unlock: 'Odomknúť miestnosť (pre používateľov)',
+    locked: 'Miestnosť je zamknutá (pre používateľov)',
+    unlocked: 'Miestnosť odomknutá (pre používateľov)',
+    notif_locked: 'miestnosť bola zamknutá',
+    notif_unlocked: 'miestnosť bola odomknutá',
+  },
 }
 
 export const setting = {
@@ -95,6 +109,4 @@ export const notifications = {
   kicked: '{name} bol/a vykopnutý/a',
   muted: 'zakázal chat používateľovi {name}',
   unmuted: 'povolil chat používateľovi {name}',
-  room_locked: 'miestnosť bola zamknutá',
-  room_unlocked: 'miestnosť bola odomknutá',
 }
diff --git a/client/src/locale/sv-se.ts b/client/src/locale/sv-se.ts
index 0eb6182d..ceb1af44 100644
--- a/client/src/locale/sv-se.ts
+++ b/client/src/locale/sv-se.ts
@@ -2,6 +2,8 @@ export const logout = 'logga ut'
 export const unsupported = 'denna webbläsare har inte stöd för webrtc'
 export const admin_loggedin = 'Du är inloggad som en administratör'
 export const you = 'Du'
+// TODO
+//export const somebody = 'Somebody'
 export const send_a_message = 'Skicka ett meddelande'
 
 export const side = {
@@ -51,11 +53,24 @@ export const controls = {
   unlock: 'Lås upp kontrollen',
 }
 
-export const room = {
-  lock: 'Lås rum (för användare)',
-  unlock: 'Lås upp rummet (för användare)',
-  locked: 'Rum låst (för användare)',
-  unlocked: 'Rum upplåst (för användare)',
+export const locks = {
+  // TODO
+  //control: {
+  //  lock: 'Lock Controls (for users)',
+  //  unlock: 'Unlock Controls (for users)',
+  //  locked: 'Controls Locked (for users)',
+  //  unlocked: 'Controls Unlocked (for users)',
+  //  notif_locked: 'locked controls for users',
+  //  notif_unlocked: 'unlocked controls for users',
+  //},
+  login: {
+    lock: 'Lås rum (för användare)',
+    unlock: 'Lås upp rummet (för användare)',
+    locked: 'Rum låst (för användare)',
+    unlocked: 'Rum upplåst (för användare)',
+    notif_locked: 'låste rummet',
+    notif_unlocked: 'låste upp rummet',
+  },
 }
 
 export const setting = {
@@ -98,6 +113,4 @@ export const notifications = {
   kicked: 'sparkade {name}',
   muted: 'tystade {name}',
   unmuted: 'tog bort tystningen på {name}',
-  room_locked: 'låste rummet',
-  room_unlocked: 'låste upp rummet',
 }
diff --git a/client/src/neko/index.ts b/client/src/neko/index.ts
index 0bdfc5a4..b1563183 100644
--- a/client/src/neko/index.ts
+++ b/client/src/neko/index.ts
@@ -21,6 +21,7 @@ import {
   BroadcastStatusPayload,
   AdminPayload,
   AdminTargetPayload,
+  AdminLockMessage,
 } from './messages'
 
 interface NekoEvents extends BaseEvents {}
@@ -461,21 +462,23 @@ export class NekoClient extends BaseClient implements EventEmitter<NekoEvents> {
     })
   }
 
-  protected [EVENT.ADMIN.LOCK]({ id }: AdminPayload) {
-    this.$accessor.setLocked(true)
+  protected [EVENT.ADMIN.LOCK]({ id, resource }: AdminLockMessage) {
+    this.$accessor.setLocked(resource)
+
     this.$accessor.chat.newMessage({
       id,
-      content: this.$vue.$t('notifications.room_locked') as string,
+      content: this.$vue.$t(`locks.${resource}.notif_locked`) as string,
       type: 'event',
       created: new Date(),
     })
   }
 
-  protected [EVENT.ADMIN.UNLOCK]({ id }: AdminPayload) {
-    this.$accessor.setLocked(false)
+  protected [EVENT.ADMIN.UNLOCK]({ id, resource }: AdminLockMessage) {
+    this.$accessor.setUnlocked(resource)
+
     this.$accessor.chat.newMessage({
       id,
-      content: this.$vue.$t('notifications.room_unlocked') as string,
+      content: this.$vue.$t(`locks.${resource}.notif_unlocked`) as string,
       type: 'event',
       created: new Date(),
     })
diff --git a/client/src/neko/messages.ts b/client/src/neko/messages.ts
index fb2e3417..f9ad2b59 100644
--- a/client/src/neko/messages.ts
+++ b/client/src/neko/messages.ts
@@ -39,6 +39,7 @@ export type WebSocketPayloads =
   | ScreenResolutionPayload
   | ScreenConfigurationsPayload
   | AdminPayload
+  | AdminLockPayload
   | BroadcastStatusPayload
   | BroadcastCreatePayload
 
@@ -222,3 +223,14 @@ export interface AdminTargetPayload {
   id: string
   target?: string
 }
+
+export interface AdminLockMessage extends WebSocketMessage, AdminLockPayload {
+  event: AdminEvents
+  id: string
+}
+
+export type AdminLockResource = 'login' | 'control'
+
+export interface AdminLockPayload {
+  resource: AdminLockResource
+}
diff --git a/client/src/store/index.ts b/client/src/store/index.ts
index ba186175..3abb348b 100644
--- a/client/src/store/index.ts
+++ b/client/src/store/index.ts
@@ -2,6 +2,7 @@ import Vue from 'vue'
 import Vuex from 'vuex'
 import { useAccessor, mutationTree, actionTree } from 'typed-vuex'
 import { EVENT } from '~/neko/events'
+import { AdminLockResource } from '~/neko/messages'
 import { get, set } from '~/utils/localstorage'
 
 import * as video from './video'
@@ -18,7 +19,7 @@ export const state = () => ({
   active: false,
   connecting: false,
   connected: false,
-  locked: false,
+  locked: {} as Record<string, boolean>,
 })
 
 export const mutations = mutationTree(state, {
@@ -31,8 +32,12 @@ export const mutations = mutationTree(state, {
     state.password = password
   },
 
-  setLocked(state, locked: boolean) {
-    state.locked = locked
+  setLocked(state, resource: string) {
+    Vue.set(state.locked, resource, true)
+  },
+
+  setUnlocked(state, resource: string) {
+    Vue.set(state.locked, resource, false)
   },
 
   setConnnecting(state) {
@@ -58,20 +63,20 @@ export const actions = actionTree(
       accessor.settings.initialise()
     },
 
-    lock() {
+    lock(_, resource: AdminLockResource) {
       if (!accessor.connected || !accessor.user.admin) {
         return
       }
 
-      $client.sendMessage(EVENT.ADMIN.LOCK)
+      $client.sendMessage(EVENT.ADMIN.LOCK, { resource })
     },
 
-    unlock() {
+    unlock(_, resource: AdminLockResource) {
       if (!accessor.connected || !accessor.user.admin) {
         return
       }
 
-      $client.sendMessage(EVENT.ADMIN.UNLOCK)
+      $client.sendMessage(EVENT.ADMIN.UNLOCK, { resource })
     },
 
     login({ state }, { displayname, password }: { displayname: string; password: string }) {
diff --git a/docs/changelog.md b/docs/changelog.md
index de07f9c4..2c662569 100644
--- a/docs/changelog.md
+++ b/docs/changelog.md
@@ -2,6 +2,9 @@
 
 ## master branch
 
+### New Features
+- Lock controls for users, globally.
+
 ### Misc
 - ARM-based images not bound to Raspberry Pi only.
 - Add japanese characters support.
diff --git a/server/internal/types/message/messages.go b/server/internal/types/message/messages.go
index f6651d4a..2ac7e9ff 100644
--- a/server/internal/types/message/messages.go
+++ b/server/internal/types/message/messages.go
@@ -106,6 +106,12 @@ type AdminTarget struct {
 	ID     string `json:"id"`
 }
 
+type AdminLock struct {
+	Event    string `json:"event"`
+	Resource string `json:"resource"`
+	ID       string `json:"id"`
+}
+
 type ScreenResolution struct {
 	Event  string `json:"event"`
 	ID     string `json:"id,omitempty"`
diff --git a/server/internal/websocket/admin.go b/server/internal/websocket/admin.go
index e74ba61e..be6c3de8 100644
--- a/server/internal/websocket/admin.go
+++ b/server/internal/websocket/admin.go
@@ -8,23 +8,30 @@ import (
 	"m1k1o/neko/internal/types/message"
 )
 
-func (h *MessageHandler) adminLock(id string, session types.Session) error {
+func (h *MessageHandler) adminLock(id string, session types.Session, payload *message.AdminLock) error {
 	if !session.Admin() {
 		h.logger.Debug().Msg("user not admin")
 		return nil
 	}
 
-	if h.locked {
-		h.logger.Debug().Msg("server already locked...")
+	_, ok := h.locked[payload.Resource]
+	if ok {
+		h.logger.Debug().Str("resource", payload.Resource).Msg("resource already locked...")
 		return nil
 	}
 
-	h.locked = true
+	if payload.Resource != "login" && payload.Resource != "control" {
+		h.logger.Debug().Msg("unknown lock resource")
+		return nil
+	}
+
+	h.locked[payload.Resource] = id
 
 	if err := h.sessions.Broadcast(
-		message.Admin{
-			Event: event.ADMIN_LOCK,
-			ID:    id,
+		message.AdminLock{
+			Event:    event.ADMIN_LOCK,
+			ID:       id,
+			Resource: payload.Resource,
 		}, nil); err != nil {
 		h.logger.Warn().Err(err).Msgf("broadcasting event %s has failed", event.ADMIN_LOCK)
 		return err
@@ -33,23 +40,25 @@ func (h *MessageHandler) adminLock(id string, session types.Session) error {
 	return nil
 }
 
-func (h *MessageHandler) adminUnlock(id string, session types.Session) error {
+func (h *MessageHandler) adminUnlock(id string, session types.Session, payload *message.AdminLock) error {
 	if !session.Admin() {
 		h.logger.Debug().Msg("user not admin")
 		return nil
 	}
 
-	if !h.locked {
-		h.logger.Debug().Msg("server not locked...")
+	_, ok := h.locked[payload.Resource]
+	if !ok {
+		h.logger.Debug().Str("resource", payload.Resource).Msg("resource not locked...")
 		return nil
 	}
 
-	h.locked = false
+	delete(h.locked, payload.Resource)
 
 	if err := h.sessions.Broadcast(
-		message.Admin{
-			Event: event.ADMIN_UNLOCK,
-			ID:    id,
+		message.AdminLock{
+			Event:    event.ADMIN_UNLOCK,
+			ID:       id,
+			Resource: payload.Resource,
 		}, nil); err != nil {
 		h.logger.Warn().Err(err).Msgf("broadcasting event %s has failed", event.ADMIN_UNLOCK)
 		return err
diff --git a/server/internal/websocket/control.go b/server/internal/websocket/control.go
index 824d7dff..8774b515 100644
--- a/server/internal/websocket/control.go
+++ b/server/internal/websocket/control.go
@@ -7,7 +7,6 @@ import (
 )
 
 func (h *MessageHandler) controlRelease(id string, session types.Session) error {
-
 	// check if session is host
 	if !h.sessions.IsHost(id) {
 		h.logger.Debug().Str("id", id).Msg("is not the host")
@@ -34,6 +33,13 @@ func (h *MessageHandler) controlRelease(id string, session types.Session) error
 func (h *MessageHandler) controlRequest(id string, session types.Session) error {
 	// check for host
 	if !h.sessions.HasHost() {
+		// check if control is locked or user is admin
+		_, ok := h.locked["control"]
+		if ok && !session.Admin() {
+			h.logger.Debug().Msg("control is locked")
+			return nil
+		}
+
 		// set host
 		err := h.sessions.SetHost(id)
 		if err != nil {
@@ -91,6 +97,13 @@ func (h *MessageHandler) controlGive(id string, session types.Session, payload *
 		return nil
 	}
 
+	// check if control is locked or giver is admin
+	_, ok := h.locked["control"]
+	if ok && !session.Admin() {
+		h.logger.Debug().Msg("control is locked")
+		return nil
+	}
+
 	// set host
 	err := h.sessions.SetHost(payload.ID)
 	if err != nil {
diff --git a/server/internal/websocket/handler.go b/server/internal/websocket/handler.go
index a52520e6..fb86731d 100644
--- a/server/internal/websocket/handler.go
+++ b/server/internal/websocket/handler.go
@@ -19,7 +19,7 @@ type MessageHandler struct {
 	remote    types.RemoteManager
 	broadcast types.BroadcastManager
 	banned    map[string]bool
-	locked    bool
+	locked    map[string]string
 }
 
 func (h *MessageHandler) Connected(admin bool, socket *WebSocket) (bool, string, error) {
@@ -34,7 +34,8 @@ func (h *MessageHandler) Connected(admin bool, socket *WebSocket) (bool, string,
 		}
 	}
 
-	if h.locked && !admin {
+	_, ok := h.locked["login"]
+	if ok && !admin {
 		h.logger.Debug().Msg("server locked")
 		return false, "locked", nil
 	}
@@ -128,9 +129,17 @@ func (h *MessageHandler) Message(id string, raw []byte) error {
 
 	// Admin Events
 	case event.ADMIN_LOCK:
-		return errors.Wrapf(h.adminLock(id, session), "%s failed", header.Event)
+		payload := &message.AdminLock{}
+		return errors.Wrapf(
+			utils.Unmarshal(payload, raw, func() error {
+				return h.adminLock(id, session, payload)
+			}), "%s failed", header.Event)
 	case event.ADMIN_UNLOCK:
-		return errors.Wrapf(h.adminUnlock(id, session), "%s failed", header.Event)
+		payload := &message.AdminLock{}
+		return errors.Wrapf(
+			utils.Unmarshal(payload, raw, func() error {
+				return h.adminUnlock(id, session, payload)
+			}), "%s failed", header.Event)
 	case event.ADMIN_CONTROL:
 		return errors.Wrapf(h.adminControl(id, session), "%s failed", header.Event)
 	case event.ADMIN_RELEASE:
diff --git a/server/internal/websocket/session.go b/server/internal/websocket/session.go
index 5e3ca47f..534f0e43 100644
--- a/server/internal/websocket/session.go
+++ b/server/internal/websocket/session.go
@@ -12,6 +12,18 @@ func (h *MessageHandler) SessionCreated(id string, session types.Session) error
 		return err
 	}
 
+	// notify all about what is locked
+	for resource, id := range h.locked {
+		if err := session.Send(message.AdminLock{
+			Event:    event.ADMIN_LOCK,
+			ID:       id,
+			Resource: resource,
+		}); err != nil {
+			h.logger.Warn().Str("id", id).Err(err).Msgf("sending event %s has failed", event.ADMIN_LOCK)
+			return err
+		}
+	}
+
 	if session.Admin() {
 		// send screen configurations if admin
 		if err := h.screenConfigurations(id, session); err != nil {
@@ -22,17 +34,6 @@ func (h *MessageHandler) SessionCreated(id string, session types.Session) error
 		if err := h.boradcastStatus(session); err != nil {
 			return err
 		}
-
-		// if locked, notify admin about that
-		if h.locked {
-			if err := session.Send(message.Admin{
-				Event: event.ADMIN_LOCK,
-				ID:    id,
-			}); err != nil {
-				h.logger.Warn().Str("id", id).Err(err).Msgf("sending event %s has failed", event.ADMIN_LOCK)
-				return err
-			}
-		}
 	}
 
 	return nil
diff --git a/server/internal/websocket/websocket.go b/server/internal/websocket/websocket.go
index 7f4dbda2..3a8c10a3 100644
--- a/server/internal/websocket/websocket.go
+++ b/server/internal/websocket/websocket.go
@@ -39,7 +39,7 @@ func New(sessions types.SessionManager, remote types.RemoteManager, broadcast ty
 			sessions:  sessions,
 			webrtc:    webrtc,
 			banned:    make(map[string]bool),
-			locked:    false,
+			locked:    make(map[string]string),
 		},
 		conns: 0,
 	}