Added groups and restricted access.

Backend/Auth.py

@@ -6,6 +6,7 @@ from typing import Any
 
 from fastapi import Depends, HTTPException, Request
 
+from Groups import AdminGroupName, GetGroupsForUser, IsUserInGroup
 from Users import GetUser
 
 
@@ -39,9 +40,14 @@ def GetCurrentUser(request: Request) -> dict[str, Any]:
     if User is None:
         raise HTTPException(status_code=401, detail="Session user no longer exists.")
 
+    # Admin isn't a stored flag — it's membership in the built-in Admin
+    # group, computed live, so it behaves exactly like any other group.
+    UserGroups = GetGroupsForUser(Username)
+
     return {
         "Username": Username,
-        "IsAdmin": User.get("IsAdmin", False),
+        "IsAdmin": AdminGroupName in UserGroups,
+        "Groups": UserGroups,
         "Colour": User.get("Colour", "Purple"),
     }