Disallow deleting your own user or removing admin role
This commit is contained in:
@@ -46,6 +46,7 @@ public class UserSettingsCommand {
|
||||
|
||||
private List<User> users;
|
||||
private boolean isAdmin;
|
||||
private boolean isCurrentUser;
|
||||
private boolean isPasswordChange;
|
||||
private boolean isNewUser;
|
||||
private boolean isDeleteUser;
|
||||
@@ -166,6 +167,14 @@ public class UserSettingsCommand {
|
||||
isAdmin = admin;
|
||||
}
|
||||
|
||||
public boolean isCurrentUser() {
|
||||
return isCurrentUser;
|
||||
}
|
||||
|
||||
public void setCurrentUser(boolean currentUser) {
|
||||
isCurrentUser = currentUser;
|
||||
}
|
||||
|
||||
public boolean isPasswordChange() {
|
||||
return isPasswordChange;
|
||||
}
|
||||
|
||||
@@ -87,6 +87,7 @@ public class UserSettingsController {
|
||||
UserSettings userSettings = settingsService.getUserSettings(user.getUsername());
|
||||
command.setTranscodeSchemeName(userSettings.getTranscodeScheme().name());
|
||||
command.setAllowedMusicFolderIds(Util.toIntArray(getAllowedMusicFolderIds(user)));
|
||||
command.setCurrentUser(securityService.getCurrentUser(request).getUsername().equals(user.getUsername()));
|
||||
} else {
|
||||
command.setNewUser(true);
|
||||
command.setStreamRole(true);
|
||||
|
||||
@@ -63,7 +63,7 @@
|
||||
|
||||
<form:form method="post" action="userSettings.view" modelAttribute="command">
|
||||
<table style="${command.admin ? 'display:none' : ''}">
|
||||
<tr>
|
||||
<tr style="${command.currentUser ? 'display:none' : ''}">
|
||||
<td><form:checkbox path="adminRole" id="admin" cssClass="checkbox"/></td>
|
||||
<td><label for="admin"><fmt:message key="usersettings.admin"/></label></td>
|
||||
</tr>
|
||||
@@ -136,7 +136,7 @@
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
<c:if test="${not command.newUser and not command.admin}">
|
||||
<c:if test="${not command.newUser and not command.admin and not command.currentUser}">
|
||||
<table class="indent">
|
||||
<tr>
|
||||
<td><form:checkbox path="deleteUser" id="delete" cssClass="checkbox"/></td>
|
||||
|
||||
Reference in New Issue
Block a user