nune/gitea
nune/gitea
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Prevent DeleteUser API abuse (#10125) (#10128)

Browse source 
* fix & co

* word suggestions from @jolheiser
This commit is contained in:
6543 2020-02-03 18:44:06 +01:00 • committed by GitHub
parent 6896dad675
commit 0129e76ef5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
routers/api/v1/admin/user.go
View file

@ -7,6 +7,7 @@ package admin
import (
"errors"
"fmt"
"net/http"
"code.gitea.io/gitea/models"
@ -226,6 +227,11 @@ func DeleteUser(ctx *context.APIContext) {
return
}
if u.IsOrganization() {
ctx.Error(http.StatusUnprocessableEntity, "", fmt.Errorf("%s is an organization not a user", u.Name))
return
}
if err := models.DeleteUser(u); err != nil {
if models.IsErrUserOwnRepos(err) ||
models.IsErrUserHasOrgs(err) {