PR#3684: Admin user cannot revoke admin permission by self - koji

Jana Cupova • 2 years ago

5a64d75

kojihub/kojihub.py

file modified

		`@@ -12599,6 +12599,8 @@`
		`if perm['name'] not in koji.auth.get_user_perms(user_id):`
		`raise koji.GenericError('user %s does not have permission: %s' %`
		`(userinfo, perm['name']))`
		`+ if (user_id == self.getLoggedInUser()['id']) and permission == 'admin':`
		`+ raise koji.GenericError('Admin user cannot revoke admin permission by self')`
		`update = UpdateProcessor('user_perms', values=locals(),`
		`clauses=["user_id = %(user_id)i", "perm_id = %(perm_id)i"])`
		`update.make_revoke()`