diff --git a/backend/api/user_api.py b/backend/api/user_api.py index c489b26..52cfef6 100644 --- a/backend/api/user_api.py +++ b/backend/api/user_api.py @@ -137,6 +137,9 @@ class UserResource(Resource): """Fetch a user given its identifier""" user = User.get_by_id(id) if user is not None: + if str(user.role) == str(Config.Roles.ADMIN): + print("role deletion forbidden") + return api_user.abort(403, message="It is not allowed to delete role admin users!") db.session.delete(user) db.session.commit() return "ok" diff --git a/backend/config.py b/backend/config.py index 50500f7..513a3c8 100644 Binary files a/backend/config.py and b/backend/config.py differ