Merge pull request #657 from ywk253100/user

sys admin can not delete himself - API update
This commit is contained in:
Daniel Jiang 2016-08-08 14:18:17 +08:00 committed by GitHub
commit 475c812d9a

View File

@ -239,6 +239,11 @@ func (ua *UserAPI) Delete() {
ua.RenderError(http.StatusForbidden, "User does not have admin role")
return
}
if ua.currentUserID == ua.userID {
ua.CustomAbort(http.StatusForbidden, "can not delete yourself")
}
var err error
err = dao.DeleteUser(ua.userID)
if err != nil {