From 0c222b9aa9d6ecd5a7436acd3116468dcc7c8989 Mon Sep 17 00:00:00 2001
From: Martin Porwoll <martin.porwoll@complexcaresolutions.de>
Date: Mon, 16 Feb 2026 16:19:09 +0000
Subject: [PATCH] fix(tenants): make SMTP password field visible in admin panel

neverReadable blocked the field everywhere including the admin UI.
Changed to allow read for authenticated users only, so the field
shows in admin but stays hidden in unauthenticated API responses.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 src/collections/Tenants.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/collections/Tenants.ts b/src/collections/Tenants.ts
index 601c96f..55dd974 100644
--- a/src/collections/Tenants.ts
+++ b/src/collections/Tenants.ts
@@ -220,7 +220,7 @@ export const Tenants: CollectionConfig = {
                     description: 'Leer lassen um bestehendes Passwort zu behalten',
                   },
                   access: {
-                    read: neverReadable, // Passwort nie in API-Response
+                    read: ({ req }) => !!req.user, // Admin kann lesen, API ohne Auth nicht
                   },
                   hooks: {
                     beforeChange: [