From 614743c8f42ffaf1accecbce50c844ff663f29b6 Mon Sep 17 00:00:00 2001 From: Alex Date: Sat, 26 Nov 2022 15:02:23 -0600 Subject: [PATCH] fix(server): Prevent delete admin user (#1023) --- server/apps/immich/src/api-v1/user/user.service.ts | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/server/apps/immich/src/api-v1/user/user.service.ts b/server/apps/immich/src/api-v1/user/user.service.ts index 311561856f777..6fe2aafefdc8d 100644 --- a/server/apps/immich/src/api-v1/user/user.service.ts +++ b/server/apps/immich/src/api-v1/user/user.service.ts @@ -119,6 +119,11 @@ export class UserService { if (!user) { throw new BadRequestException('User not found'); } + + if (user.isAdmin) { + throw new BadRequestException('Cannot delete admin user'); + } + try { const deletedUser = await this.userRepository.delete(user); return mapUser(deletedUser);