prevent admin from deleting their account

2025-12-20 19:05:01 +03:00
parent fc55aaf87a
commit 4a45b62521
1 changed files with 4 additions and 0 deletions
--- a/app/routes/users.py
+++ b/app/routes/users.py
@@ -884,6 +884,10 @@ def delete_page_confirm(username):
        flash('Incorrect password.', InfoboxKind.ERROR)
        return redirect(url_for('.delete_page', username=username))

+    if target_user.is_admin():
+        flash('You cannot delete the admin account.', InfoboxKind.ERROR)
+        return redirect(url_for('.delete_page', username=username))
+
    anonymize_user(target_user.id)
    sessions = Sessions.findall({'user_id': int(target_user.id)})
    for session_obj in sessions: