[XTR] Login as User 1.0.4

This comprehensive update introduces the brand new Admin Alias (Quick Account Switching) feature to streamline daily forum management, while completely refactoring the add-on to meet XenForo 2.3 core standards with enterprise-grade security.
1. Quick Admin Alias (Linked Accounts) System
Administrators can now link their secondary accounts (such as test accounts, bot accounts, or official announcement profiles) to their primary account and switch between them instantly with a single click—no passwords required!

• Easily manage your linked alias accounts from both the Admin Control Panel and the front-end Account > Alias Accounts page.
• Seamlessly switch between profiles from anywhere on the forum via dedicated menus in the Staff Bar and Visitor Menu.
• Return to your primary administrator profile safely at any time with one click.

2. Direct Public Homepage Redirection from Admin CP
Resolved the redirect loop when clicking "Login as User" from the Admin CP user edit page. After confirming your password, you are now redirected directly to the public forum homepage logged in as the selected member, instead of being redirected back into the Admin Control Panel.

3. XenForo 2.3 Clean Architecture & Auto-Cleanup
The codebase has been refactored to strictly adhere to XenForo 2.3 architecture. When upgrading from version 1.0.3, any obsolete legacy files lingering on your server are automatically detected and safely deleted during the upgrade process.

4. Reinforced Security and Role Hierarchy
Zero-tolerance safeguards have been put in place to eliminate any risk of unauthorized access or privilege escalation:

• Non-staff members can never initiate an impersonation session under any circumstances, even if permissions are accidentally misconfigured.
• Regular administrators cannot log into other administrator accounts; only Super Administrators can supervise admin accounts.
• Super Administrator accounts are strictly untouchable and can never be impersonated by anyone.
• Sensitive profile settings (passwords, emails, two-step verification, passkeys, and account deletion) are completely locked during an active session.
• Target members can terminate active sessions immediately from their end with a single click.

5. Polished User Interface
Fixed duplicate action icons in dropdown menus to ensure clean, consistent styling across all XenForo themes.

Change Log
Admin Alias (Quick Account Switching) System:

• Added Alias framework allowing administrators to link secondary profiles and switch between them with a single click.
• Added front-end "Account > Alias Accounts" management page and navigation link.
• Added "Manage Aliases" tool to the Admin Control Panel user edit page.
• Integrated quick alias switching menus into both the Staff Bar and the Visitor Menu.
• Added active status badge in the top bar with a one-click return to primary account button.
• Added option to configure the maximum allowed aliases per administrator.
• Added option to make password re-verification optional during alias switching.

Architecture, Security & Core Standards:

• Refactored codebase to strictly adhere to XenForo 2.3 architecture, organizing security and service classes into proper namespaces.
• Implemented automatic detection and deletion of legacy files when upgrading from version 1.0.3.
• Fixed redirection when initiating "Login as User" from the Admin CP; users are now seamlessly redirected to the public forum homepage after password confirmation.
• Enforced hard staff-only verification preventing non-staff members from impersonating accounts regardless of permission configurations.
• Restricted administrator impersonation exclusively to Super Administrators to eliminate privilege escalation between admins.
• Enforced strict protection ensuring Super Administrator accounts can never be impersonated by anyone.
• Locked sensitive account management actions during sessions (passwords, emails, two-step verification, passkeys, and account deletion).
• Added automatic cascade cleanup of alias records when associated users are deleted from the forum.

User Interface & Experience:

• Fixed duplicate icon display issue in the Actions dropdown menu across templates and style sheets.
• Standardized form validation overlays in alias deletion confirmation modals according to XenForo core conventions.
• Ensured consistent visual rendering of action menus and staff bars across all custom styles.

This version prevents accidental automatic re-downloads under the administrator's identity when reverting back from an impersonated member account while on a download screen, ensuring a clean and safe return to your original session.

Upgrading to version 1.0.3 is recommended for all administrators.

• Safe Session Reversion: Fixed an issue where clicking "Revert to My Account" while viewing an active download or timer screen would automatically re-trigger the download under the Administrator account. Reverting now safely redirects to the content page without executing unwanted downloads.
• System Compatibility Enhanced: Optimized core compatibility for seamless coexistence with other XenTR products and XenForo's extension chain.

This maintenance release primarily addresses unexpected template warnings that could appear in server error logs when unauthenticated guests or search engine bots browse forums using custom themes.

Key Improvements:

• Complete Guest Safety Protection: Staff bar and quick switch elements now strictly verify whether a visitor is signed in before running any background checks. This eliminates unnecessary processing and keeps your server error logs completely clean.
• Enhanced Custom Theme Compatibility: Template modification rules have been refined to ensure seamless operation across custom and third-party XenForo themes.
• Member Card & Profile Enhancements: The evaluation process for login action buttons on member tooltips and profile pages is now faster and more resilient.

We strongly recommend all users upgrade to version 1.0.2 for a cleaner and more stable experience.

• Fixed: Resolved a template warning that could be recorded in server error logs during guest visits on custom themes.
• Improved: Optimized the staff bar display logic, preventing unnecessary background checks for unauthenticated guests and search bots.
• Improved: Enhanced safety and stability for user switching buttons on member cards and profiles.
• Improved: Strengthened overall custom theme compatibility and template integration.

We are excited to announce the release of Version 1.0.1, built upon valuable community feedback and security-driven enhancements.

This update introduces significant improvements to transparency, account security, and overall performance—making user impersonation smoother and safer for both staff members and forum users.

Key Highlights of Version:

• Automated Direct Message (Conversation) Notifications:
  When an authorized staff member accesses or leaves a member's account, an automated private conversation can be sent to the target user informing them of the session. Administrators can choose whether the notification is sent directly from the operating staff member or from a designated system/bot account. Conversations can also be locked to prevent unnecessary replies.
• Live Inspection Notice & One-Click Session Termination:
  If the actual account owner browses the forum while an authorized staff member is actively logged into their account, a prominent notification banner is displayed. If the user does not expect this session, they can click the "Terminate & Report Suspicious Activity" button to instantly disconnect the staff session.
• Enhanced Security & Audit Trail:
  To ensure full accountability and forensic tracking even when stealth mode is enabled, critical content creation actions (such as posting threads, replies, or direct messages) preserve accurate IP logs for administrative review.
• Sensitive Security & Financial Protection:
  Impersonators are automatically restricted from accessing critical areas such as account password changes, two-factor authentication settings, and financial/store transactions.
• Speed & Resource Optimization:
  Background system checks have been optimized to eliminate redundant disk operations, ensuring pages load faster with minimal server resource usage.
• Complete Multi-Language Support:
  Every single label, notification message, and audit log description is now fully phrased, allowing effortless translation into any language.

We strongly recommend upgrading to version 1.0.1 to take advantage of these new security features and improvements!

New Features:

• Added automated direct message (conversation) notification to target users upon session start and session completion.
• Added option to choose whether automated notifications are sent by the operating staff member or a designated system/bot account.
• Added single-user autocomplete field in ACP options for selecting the system sender user.
• Added option to automatically lock notification conversations to prevent direct replies.
• Added a prominent live notice banner displayed to the target user if they browse while their account is under inspection.
• Added a "Terminate & Report Suspicious Activity" button allowing users to immediately disconnect unauthorized sessions.

Security & Fixes:

• Preserved genuine IP logging for critical content creations (threads, posts, conversation messages, profile posts) even when stealth mode is active.
• Restricted impersonator access to account security settings (password change, two-step verification) and financial checkout routes.
• Enhanced session termination handling with clear audit log statuses for user-terminated sessions.
• Converted all internal exception and error log prefixes to XenForo phrases for 100% internationalization support.

Performance Improvements:

• Implemented request-level caching for file checks to eliminate redundant disk operations per page render.
• Removed redundant database and identity map lookups during permission checks.