Admin should not delete himself (#19423)

Admin should not be able to delete themselves.

Also partially fix #15449
This commit is contained in:
Lunny Xiao authored and GitHub committed 2022-05-08 21:22:55 +01:00
1 parent 290cc884f2
commit 9efa47131f
3 files changed
+16

No files matched your search

+6
View File
@@ -310,6 +310,12 @@ func DeleteUser(ctx *context.APIContext) {
return
}
// admin should not delete themself
if ctx.ContextUser.ID == ctx.Doer.ID {
ctx.Error(http.StatusUnprocessableEntity, "", fmt.Errorf("you cannot delete yourself"))
return
}
if err := user_service.DeleteUser(ctx.ContextUser); err != nil {
if models.IsErrUserOwnRepos(err) ||
models.IsErrUserHasOrgs(err) ||