groove/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2026-07-21 16:51:42 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Simplify user delete checks

Browse source
This commit is contained in:
advplyr 2026-07-20 17:33:15 -05:00
parent bced308462
commit f12abca3fc
1 changed files with 4 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

12
server/controllers/UserController.js
View file

@ -365,18 +365,14 @@ class UserController {
async delete(req, res) {
const user = req.reqUser
if (user.isRoot && !req.user.isRoot) {
Logger.error(`[UserController] Admin user "${req.user.username}" attempted to delete root user`)
return res.sendStatus(403)
}
if (user.isRoot) {
Logger.error('[UserController] Attempt to delete root user. Root user cannot be deleted')
return res.sendStatus(400)
}
if (req.user.id === req.params.id) {
Logger.error(`[UserController] User ${req.user.username} is attempting to delete self`)
return res.sendStatus(400)
}
if (user.isRoot) {
Logger.error(`[UserController] Admin user "${req.user.username}" attempted to delete root user`)
return res.sendStatus(403)
}
// Todo: check if user is logged in and cancel streams