Disallow deleting your own user or removing admin role

2019-06-26 21:17:56 -05:00
parent f8bd580fb7
commit a4c62f6860
3 changed files with 12 additions and 2 deletions
@@ -63,7 +63,7 @@

 <form:form method="post" action="userSettings.view" modelAttribute="command">
        <table style="${command.admin ? 'display:none' : ''}">
-            <tr>
+            <tr style="${command.currentUser ? 'display:none' : ''}">
                <td><form:checkbox path="adminRole" id="admin" cssClass="checkbox"/></td>
                <td><label for="admin"><fmt:message key="usersettings.admin"/></label></td>
            </tr>
@@ -136,7 +136,7 @@
        </tr>
    </table>

-    <c:if test="${not command.newUser and not command.admin}">
+    <c:if test="${not command.newUser and not command.admin and not command.currentUser}">
        <table class="indent">
            <tr>
                <td><form:checkbox path="deleteUser" id="delete" cssClass="checkbox"/></td>