Seamless deployment update for recdgp88 yearbook directory app

app.py

@@ -1042,6 +1042,9 @@ def require_admin(f):
 def index():
     if 'userid' in session and session.get('verified_2fa'):
         user_id = session.get('userid')
+        # 'admin' superuser has no alumni profile — always go to admin dashboard
+        if user_id == 'admin':
+            return redirect(url_for('admin'))
         with DatabaseManager.get_structured_connection() as conn:
             cursor = conn.cursor()
             cursor.execute("SELECT 1 FROM alumni WHERE alumni_id = ?", (user_id,))
@@ -1888,6 +1891,11 @@ def profile(alumni_id):
     # RBAC constraint: A regular alumnus user can only view/edit their own profile
     current_userid = session.get('userid')
     is_admin = session.get('is_admin')
+
+    # The 'admin' superuser account has no alumni profile — redirect to admin dashboard
+    if alumni_id == 'admin' or current_userid == 'admin':
+        flash("The admin account does not have a member profile.", "info")
+        return redirect(url_for('admin'))
     
     if not is_admin and current_userid != alumni_id:
         abort(403)

app/templates/base.html

@@ -29,7 +29,9 @@
             </div>
             <nav>
                 {% if session.get('userid') %}
+                    {% if session.get('userid') != 'admin' %}
                     <a href="{{ url_for('profile', alumni_id=session.get('userid')) }}" class="{% if request.path == url_for('profile', alumni_id=session.get('userid')) %}active{% endif %}">👤 My Profile</a>
+                    {% endif %}
                     {% if session.get('is_admin') %}
                         <a href="{{ url_for('admin') }}" class="{% if request.path == url_for('admin') %}active{% endif %}">🛡️ Admin Dashboard</a>
                     {% endif %}