UniqAI/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui synced 2025-02-16 18:22:29 +00:00
Code Issues Actions 4 Packages Projects Releases Wiki Activity

fix: disable admin self user delete

Browse Source
This commit is contained in:
Timothy J. Baek 2023-12-28 23:07:46 -08:00
parent b61bb77950
commit ad1cb5fc25
1 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
backend/apps/web/routers/users.py
View File

@ -87,14 +87,20 @@ async def delete_user_by_id(user_id: str, cred=Depends(bearer_scheme)):
if user:
if user.role == "admin":
result = Users.delete_user_by_id(user_id)
if user.id != user_id:
result = Users.delete_user_by_id(user_id)
if result:
return True
if result:
return True
else:
raise HTTPException(
status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
detail=ERROR_MESSAGES.DELETE_USER_ERROR,
)
else:
raise HTTPException(
status_code=status.HTTP_403_FORBIDDEN,
detail=ERROR_MESSAGES.DELETE_USER_ERROR,
detail=ERROR_MESSAGES.ACTION_PROHIBITED,
)
else:
raise HTTPException(