Anon/pleroma
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

lib/pleroma/web/admin_api/admin_api_controller.ex: An admin cannot un-admin themselves

Browse Source
This commit is contained in:
Haelwenn (lanodan) Monnier 2018-11-10 14:42:34 +01:00
parent a87ed2fad6
commit f9d05902fe
No known key found for this signature in database
GPG Key ID: D5B7A8E43C997DEE
1 changed files with 21 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
lib/pleroma/web/admin_api/admin_api_controller.ex
View File

@ -68,19 +68,31 @@ defmodule Pleroma.Web.AdminAPI.AdminAPIController do
|> json(%{error: "No such right"})
end
def right_delete(conn, %{"right" => right, "nickname" => nickname})
def right_delete(
%{assigns: %{user: %User{:nickname => admin_nickname}}} = conn,
%{
"right" => right,
"nickname" => nickname
}
)
when right in ["moderator", "admin"] do
user = User.get_by_nickname(nickname)
if admin_nickname == nickname do
conn
|> post_status(403)
|> json(%{error: "You can't revoke your own admin status."})
else
user = User.get_by_nickname(nickname)
info =
user.info
|> Map.put("is_" <> right, false)
info =
user.info
|> Map.put("is_" <> right, false)
cng = User.info_changeset(user, %{info: info})
{:ok, user} = User.update_and_set_cache(cng)
cng = User.info_changeset(user, %{info: info})
{:ok, user} = User.update_and_set_cache(cng)
conn
|> json(user.info)
conn
|> json(user.info)
end
end
def right_delete(conn, _) do