Fix: permission management

2025-08-08 12:11:46 +08:00 · 2020-03-13 10:30:21 +08:00
parent e720b7af66
commit 2cce2d5cf2
4 changed files with 21 additions and 4 deletions
--- a/cmdb-api/api/lib/perm/acl/user.py
+++ b/cmdb-api/api/lib/perm/acl/user.py
@@ -75,6 +75,9 @@ class UserCRUD(object):

    @classmethod
    def delete(cls, uid):
+        if uid == g.user.uid:
+            return abort(400, "You cannot delete yourself")
+
        user = User.get_by(uid=uid, to_dict=False, first=True) or abort(404, "User <{0}> does not exist".format(uid))

        UserCache.clean(user)