slight changes to config

backend/api/user_api.py

@@ -137,6 +137,9 @@ class UserResource(Resource):
         """Fetch a user given its identifier"""
         user = User.get_by_id(id)
         if user is not None:
+            if str(user.role) == str(Config.Roles.ADMIN):
+                print("role deletion forbidden")
+                return api_user.abort(403, message="It is not allowed to delete role admin users!")
             db.session.delete(user)
             db.session.commit()
             return "ok"