limepotato/akkoma
1
0
Fork 0
Code Pull requests Activity

lib/pleroma/web/admin_api/admin_api_controller.ex: An admin cannot un-admin themselves

Browse source
This commit is contained in:
Haelwenn (lanodan) Monnier 2018-11-10 14:42:34 +01:00
parent a87ed2fad6
commit f9d05902fe
No known key found for this signature in database
GPG key ID: D5B7A8E43C997DEE
1 changed files with 21 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
lib/pleroma/web/admin_api/admin_api_controller.ex
View file

@ -68,8 +68,19 @@ defmodule Pleroma.Web.AdminAPI.AdminAPIController do
|> json(%{error: "No such right"})
end
def right_delete(conn, %{"right" => right, "nickname" => nickname})
def right_delete(
%{assigns: %{user: %User{:nickname => admin_nickname}}} = conn,
%{
"right" => right,
"nickname" => nickname
}
)
when right in ["moderator", "admin"] do
if admin_nickname == nickname do
conn
|> post_status(403)
|> json(%{error: "You can't revoke your own admin status."})
else
user = User.get_by_nickname(nickname)
info =
@ -82,6 +93,7 @@ defmodule Pleroma.Web.AdminAPI.AdminAPIController do
conn
|> json(user.info)
end
end
def right_delete(conn, _) do
conn