Patrick Bass Summary. The admin UI surfaces raw sudo commands inside transient/flash messages, effectively advertising the underlying shell command to the operator. We should run the command server-side and show a clean, action-oriented message instead.
What to do. Walk the codebase for flash / transient / toast messages that echo a sudo command (and any "run this: …" style strings) and remove the command text. Keep a plain confirmation (e.g. "Tenant suspended") and let the server execute silently.
Why. Exposing shell/sudo invocations in the UI is noise at best and an information leak at worst; the operator never needs to see or copy the command.
Status: verified. Open — not yet actioned.
Patrick Bass
@mobieus
