starred/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2026-07-22 12:38:34 +02:00
Code Issues 1.0k Packages Projects Releases 10 Wiki Activity

Simplify user delete checks

Browse Source
This commit is contained in:
advplyr
2026-07-20 17:33:15 -05:00
parent bced308462
commit f12abca3fc
1 changed files with 4 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/controllers/UserController.js
+4 -8
View File
@@ -365,18 +365,14 @@ class UserController {
async delete(req, res) {
const user = req.reqUser
if (user.isRoot && !req.user.isRoot) {
Logger.error(`[UserController] Admin user "${req.user.username}" attempted to delete root user`)
return res.sendStatus(403)
}
if (user.isRoot) {
Logger.error('[UserController] Attempt to delete root user. Root user cannot be deleted')
return res.sendStatus(400)
}
if (req.user.id === req.params.id) {
Logger.error(`[UserController] User ${req.user.username} is attempting to delete self`)
return res.sendStatus(400)
}
if (user.isRoot) {
Logger.error(`[UserController] Admin user "${req.user.username}" attempted to delete root user`)
return res.sendStatus(403)
}
// Todo: check if user is logged in and cancel streams