From 25cd81e326d5a644aad93620c630aae4ef788000 Mon Sep 17 00:00:00 2001 From: Aevann1 Date: Fri, 9 Dec 2022 07:58:44 +0200 Subject: [PATCH] dont allow admins to remove themselves --- files/routes/admin.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/files/routes/admin.py b/files/routes/admin.py index c1c84b315..2c5f020b8 100644 --- a/files/routes/admin.py +++ b/files/routes/admin.py @@ -211,6 +211,9 @@ def make_admin(v, username): @admin_level_required(PERMS['ADMIN_REMOVE']) def remove_admin(v, username): user = get_user(username) + if user.id == v.id: + abort(403, "You can't remove yourself JC") + user.admin_level = 0 g.db.add(user)