Forbid deletion of current user for admins

Mirantis · Sep 3, 2018 · 0db8a88 · 0db8a88
1 parent 9ebff75
commit 0db8a88
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/kqueen/blueprints/api/views.py b/kqueen/blueprints/api/views.py
@@ -546,6 +546,13 @@ def get_policy_key(self):
         policy_key = super().get_policy_key()
         return '{}_{}'.format(policy_key, self.obj.role)
 
+    def dispatch_request(self, *args, **kwargs):
+        self.check_authentication()
+        if str(kwargs['pk']) == current_identity.id:
+            abort(400, "You can not delete yourself")
+
+        return super().dispatch_request(*args, **kwargs)
+
 
 api.add_url_rule('/users', view_func=ListUsers.as_view('user_list'))
 api.add_url_rule('/users', view_func=CreateUser.as_view('user_create'))

diff --git a/setup.py b/setup.py
@@ -54,7 +54,6 @@
         'google-auth-httplib2==0.0.3',
         'azure-common==1.1.9',
         'azure-mgmt-containerservice==3.0.0',
-        'msrestazure==0.4.25',
         'urllib3==1.22'
     ],
     setup_requires=[