Verified Commit f9d05902 authored by Haelwenn's avatar Haelwenn
Browse files

lib/pleroma/web/admin_api/admin_api_controller.ex: An admin cannot un-admin themselves

parent a87ed2fa
......@@ -68,19 +68,31 @@ def right_add(conn, _) do
|> json(%{error: "No such right"})
end
def right_delete(conn, %{"right" => right, "nickname" => nickname})
def right_delete(
%{assigns: %{user: %User{:nickname => admin_nickname}}} = conn,
%{
"right" => right,
"nickname" => nickname
}
)
when right in ["moderator", "admin"] do
user = User.get_by_nickname(nickname)
if admin_nickname == nickname do
conn
|> post_status(403)
|> json(%{error: "You can't revoke your own admin status."})
else
user = User.get_by_nickname(nickname)
info =
user.info
|> Map.put("is_" <> right, false)
info =
user.info
|> Map.put("is_" <> right, false)
cng = User.info_changeset(user, %{info: info})
{:ok, user} = User.update_and_set_cache(cng)
cng = User.info_changeset(user, %{info: info})
{:ok, user} = User.update_and_set_cache(cng)
conn
|> json(user.info)
conn
|> json(user.info)
end
end
def right_delete(conn, _) do
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment