Feature: Customizable access denied message via Admin Settings; persisted to Cosmos DB. Default to hard-coded message.

Author: Chen, Vivien

application/single_app/route_frontend_admin_settings.py

@@ -656,6 +656,7 @@ def is_valid_url(url):
                 'max_file_size_mb': max_file_size_mb,
                 'conversation_history_limit': conversation_history_limit,
                 'default_system_prompt': form_data.get('default_system_prompt', '').strip(),
+                'access_denied_message': form_data.get('access_denied_message', '').strip(),
 
                 # Video file settings with Azure Video Indexer Settings
                 'video_indexer_endpoint': form_data.get('video_indexer_endpoint', video_indexer_endpoint).strip(),

application/single_app/templates/admin_settings.html

@@ -1196,6 +1196,11 @@ <h5>
                         <label for="default_system_prompt" class="form-label">Default System Prompt</label>
                         <textarea class="form-control" id="default_system_prompt" name="default_system_prompt"
                             rows="5">{{ settings.default_system_prompt }}</textarea>
+
+                        <div class="mt-3"></div>
+                        <label for="access_denied_message" class="form-label">Access Denied Message</label>
+                        <textarea class="form-control" id="access_denied_message" name="access_denied_message"
+                            rows="3" placeholder="Shown to signed-in users without required roles">{{ settings.access_denied_message }}</textarea>
                     </div>
                 </div>
             </div>

application/single_app/templates/index.html

@@ -58,8 +58,7 @@
     {% else %}
         {% if session.get('user') %}
             <p class="lead">
-                You are logged in but do not have the required permissions to access this application.
-                Please submit a ticket to request access.
+                {{ (app_settings.access_denied_message or 'You are logged in but do not have the required permissions to access this application. Please submit a ticket to request access.') | e | replace('\n','<br>') | safe }}
             </p>
         {% else %}
             <div>