mirror/Part-DB.Part-DB-server
1
0
Fork 1
mirror of https://github.com/Part-DB/Part-DB-server.git synced 2025-06-21 17:39:06 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Forbid to delete the anonymous user.

Browse source
This commit is contained in:
Jan Böhmer 2019-09-19 13:49:10 +02:00
parent 006cd9c7e5
commit a8612d9609
2 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
src/Controller/UserController.php
View file

@ -89,6 +89,9 @@ class UserController extends AdminPages\BaseAdminController
*/
public function delete(Request $request, User $entity, StructuralElementRecursionHelper $recursionHelper)
{
if ($entity->getID() == User::ID_ANONYMOUS) {
throw new \InvalidArgumentException('You can not delete the anonymous user! It is needed for permission checking without a logged in user');
}
return $this->_delete($request, $entity, $recursionHelper);
}

3
templates/AdminPages/_delete_form.html.twig
View file

@ -6,7 +6,8 @@
<div class="form-group">
<div class=""></div>
<div class="col offset-3 pl-2">
<button class="btn btn-danger" {% if not is_granted("delete", entity) %}disabled{% endif %}">{% trans %}entity.delete{% endtrans %}</button>
{% set delete_disabled = (not is_granted("delete", entity)) or (entity.group is defined and entity.id == 1) %}
<button class="btn btn-danger" {% if delete_disabled %}disabled{% endif %}>{% trans %}entity.delete{% endtrans %}</button>
{% if entity.parent is defined %}
<div class="ml-2 custom-control custom-checkbox custom-control-inline">
<input type="checkbox" class="custom-control-input" id="recursive" name="delete_recursive">