Two ways to bypass addon about custom-sidebar

[Jinx735]

Yeah, already did that. Just hoped it’s possible to block certain settings and not all of them. But I guess that’s not possible.

[Jinx735]

Yeah, works great, Thanks again 👍

[elchininet]

Hi @Jinx735,
That is expected, this is just a JavaScript plugin that is loaded on top of Home Assistant when the page is loaded, it is not an integration or an addon that changes Home Assistant behaviours. If you use the change order feature of Home Assistant, the native component of the sidebar is rerendered and therefore all the changes that the plugin made are destroyed, but everything will be back to normal if you refresh the page (the same with the language).

[Jinx735]

Alright, just wanted to make sure 👍😂

[elchininet]

Everything that is JavaScript could be bypassed so nothing about JavaScript plugins should be taken as an RBAC feature, but you could use kiosk-mode and hide the accounts for the desired user, so they will not have access to that panel 😉

[elchininet]

Hi @Jinx735,

I was looking at the Home Assistant frontend code and they edit the sidebar with an event, in theory, it is possible to stop the propagation of this event. So it is possible to ignore if the user makes a long press in the sidebar title or if the user presses the button to edit the sidebar. 😉

But I am not sure about the language one, could you post a video of the issue with the language to see if looking at the frontend code I can figure it out a workaround?

[Jinx735]

Sure, here you go

profil-home-assistant-personlich-microsoft-edge-2024-02-12-23-00-07_5Lf4NVKh.mp4

[elchininet]

That could be avoided. That is because you are matching by text, and the text is different per language of course. Try to match by data-panel or by href and it will work for all the languages.

[elchininet]

Hi @Jinx735,

I have released a new minor version, in this version it is possible to set a new option in the root of the configuration:

sidebar_editable: false

If this option is set to false, long presses on the sidebar title will be ignored and the button to edit the sidebar will be disbaled in the profile dashboard.

Give it a try.

[elchininet]

Super, thanks for confirming 👍🏼