dont allow admins to remove themselves

2022-12-09 07:58:44 +02:00 · 2022-12-09 07:58:44 +02:00 · 25cd81e326
parent 77429369d7
commit 25cd81e326
1 changed files with 3 additions and 0 deletions
--- a/files/routes/admin.py
+++ b/files/routes/admin.py
@ -211,6 +211,9 @@ def make_admin(v, username):
@admin_level_required(PERMS['ADMIN_REMOVE'])
 def remove_admin(v, username):
 	user = get_user(username)
+	if user.id == v.id:
+		abort(403, "You can't remove yourself JC")
+
 	user.admin_level = 0
 	g.db.add(user)