From ab74e73c83911ca4441b1327d149b9f656a5a210 Mon Sep 17 00:00:00 2001
From: "Chen, Vivien" <Vivien.Chen+ecolab@ecolab.com>
Date: Tue, 30 Dec 2025 16:41:25 -0500
Subject: [PATCH 1/3] Feature: Customizable access denied message via Admin
 Settings; persisted to Cosmos DB. Default to hard-coded message.

---
 application/single_app/config.py             | 2 +-
 application/single_app/functions_settings.py | 3 +++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/application/single_app/config.py b/application/single_app/config.py
index f139bbf3..cd9f9a1e 100644
--- a/application/single_app/config.py
+++ b/application/single_app/config.py
@@ -89,7 +89,7 @@
 EXECUTOR_TYPE = 'thread'
 EXECUTOR_MAX_WORKERS = 30
 SESSION_TYPE = 'filesystem'
-VERSION = "0.233.318"
+VERSION = "0.233.319"
 
 
 SECRET_KEY = os.getenv('SECRET_KEY', 'dev-secret-key-change-in-production')
diff --git a/application/single_app/functions_settings.py b/application/single_app/functions_settings.py
index 7c43e71d..84f1fc1b 100644
--- a/application/single_app/functions_settings.py
+++ b/application/single_app/functions_settings.py
@@ -219,6 +219,9 @@ def get_settings(use_cosmos=False):
         'max_file_size_mb': 150,
         'conversation_history_limit': 10,
         'default_system_prompt': '',
+        # Access denied message shown on the home page when a signed-in user lacks required roles
+        # Default is hard-coded; admins can override via Admin Settings (persisted in Cosmos DB)
+        'access_denied_message': 'You are logged in but do not have the required permissions to access this application.\nPlease submit a ticket to request access.',
         'enable_file_processing_logs': True,
         'file_processing_logs_timer_enabled': False,
         'file_timer_value': 1,

From a7b07f0683009f52b5b47811e32ac2b625dc3539 Mon Sep 17 00:00:00 2001
From: "Chen, Vivien" <Vivien.Chen+ecolab@ecolab.com>
Date: Tue, 30 Dec 2025 16:57:23 -0500
Subject: [PATCH 2/3] Feature: Customizable access denied message via Admin
 Settings; persisted to Cosmos DB. Default to hard-coded message.

---
 application/single_app/route_frontend_admin_settings.py | 1 +
 application/single_app/templates/admin_settings.html    | 5 +++++
 application/single_app/templates/index.html             | 3 +--
 3 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/application/single_app/route_frontend_admin_settings.py b/application/single_app/route_frontend_admin_settings.py
index 455e8eb3..41c83e21 100644
--- a/application/single_app/route_frontend_admin_settings.py
+++ b/application/single_app/route_frontend_admin_settings.py
@@ -656,6 +656,7 @@ def is_valid_url(url):
                 'max_file_size_mb': max_file_size_mb,
                 'conversation_history_limit': conversation_history_limit,
                 'default_system_prompt': form_data.get('default_system_prompt', '').strip(),
+                'access_denied_message': form_data.get('access_denied_message', '').strip(),
 
                 # Video file settings with Azure Video Indexer Settings
                 'video_indexer_endpoint': form_data.get('video_indexer_endpoint', video_indexer_endpoint).strip(),
diff --git a/application/single_app/templates/admin_settings.html b/application/single_app/templates/admin_settings.html
index b44ee3e3..8fbcf230 100644
--- a/application/single_app/templates/admin_settings.html
+++ b/application/single_app/templates/admin_settings.html
@@ -1196,6 +1196,11 @@ <h5>
                         <label for="default_system_prompt" class="form-label">Default System Prompt</label>
                         <textarea class="form-control" id="default_system_prompt" name="default_system_prompt"
                             rows="5">{{ settings.default_system_prompt }}</textarea>
+
+                        <div class="mt-3"></div>
+                        <label for="access_denied_message" class="form-label">Access Denied Message</label>
+                        <textarea class="form-control" id="access_denied_message" name="access_denied_message"
+                            rows="3" placeholder="Shown to signed-in users without required roles">{{ settings.access_denied_message }}</textarea>
                     </div>
                 </div>
             </div>
diff --git a/application/single_app/templates/index.html b/application/single_app/templates/index.html
index 2e182e67..3480d832 100644
--- a/application/single_app/templates/index.html
+++ b/application/single_app/templates/index.html
@@ -58,8 +58,7 @@
     {% else %}
         {% if session.get('user') %}
             <p class="lead">
-                You are logged in but do not have the required permissions to access this application.
-                Please submit a ticket to request access.
+                {{ (app_settings.access_denied_message or 'You are logged in but do not have the required permissions to access this application. Please submit a ticket to request access.') | e | replace('\n','<br>') | safe }}
             </p>
         {% else %}
             <div>

From 091af73906c0dbe3b91c7e1369da518b267dc0c9 Mon Sep 17 00:00:00 2001
From: "Chen, Vivien" <Vivien.Chen+ecolab@ecolab.com>
Date: Mon, 5 Jan 2026 20:37:16 -0500
Subject: [PATCH 3/3] Updated default access denied message.

---
 application/single_app/functions_settings.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/application/single_app/functions_settings.py b/application/single_app/functions_settings.py
index 84f1fc1b..c6f67e88 100644
--- a/application/single_app/functions_settings.py
+++ b/application/single_app/functions_settings.py
@@ -221,7 +221,7 @@ def get_settings(use_cosmos=False):
         'default_system_prompt': '',
         # Access denied message shown on the home page when a signed-in user lacks required roles
         # Default is hard-coded; admins can override via Admin Settings (persisted in Cosmos DB)
-        'access_denied_message': 'You are logged in but do not have the required permissions to access this application.\nPlease submit a ticket to request access.',
+        'access_denied_message': 'You are logged in but do not have the required permissions to access this application.\nPlease contact an administrator for access.',
         'enable_file_processing_logs': True,
         'file_processing_logs_timer_enabled': False,
         'file_timer_value': 1,