瀏覽代碼

fix(server): Prevent delete admin user (#1023)

Alex 2 年之前
父節點
當前提交
614743c8f4
共有 1 個文件被更改,包括 5 次插入0 次删除
  1. 5 0
      server/apps/immich/src/api-v1/user/user.service.ts

+ 5 - 0
server/apps/immich/src/api-v1/user/user.service.ts

@@ -119,6 +119,11 @@ export class UserService {
     if (!user) {
       throw new BadRequestException('User not found');
     }
+
+    if (user.isAdmin) {
+      throw new BadRequestException('Cannot delete admin user');
+    }
+
     try {
       const deletedUser = await this.userRepository.delete(user);
       return mapUser(deletedUser);