administrator/frigate
1
0
Fork 0
mirror of https://github.com/blakeblackshear/frigate.git synced 2025-12-06 21:44:13 +03:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

explicitly prevent deletion of admin user

Browse Source
This commit is contained in:
Josh Hawkins 2025-11-26 07:12:00 -06:00
parent 113365b911
commit ea217bdbac
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
frigate/api/auth.py
View File

@ -579,7 +579,13 @@ def create_user(
@router.delete("/users/{username}", dependencies=[Depends(require_role(["admin"]))]) @router.delete("/users/{username}", dependencies=[Depends(require_role(["admin"]))])
def delete_user(username: str): def delete_user(request: Request, username: str):
# Prevent deletion of the built-in admin user
if username == "admin":
return JSONResponse(
content={"message": "Cannot delete admin user"}, status_code=403
)
User.delete_by_id(username) User.delete_by_id(username)
return JSONResponse(content={"success": True}) return JSONResponse(content={"success": True})