mirror of
https://github.com/Abdulazizzn/n8n-enterprise-unlocked.git
synced 2025-12-17 10:02:05 +00:00
fix(core): Do not allow admins to delete the instance owner (#9489)
This commit is contained in:
committed by
GitHub
parent
88b9a4070b
commit
fc83005ba0
@@ -582,6 +582,15 @@ describe('DELETE /users/:id', () => {
|
||||
expect(user).toBeDefined();
|
||||
});
|
||||
|
||||
test('should fail to delete the instance owner', async () => {
|
||||
const admin = await createAdmin();
|
||||
const adminAgent = testServer.authAgentFor(admin);
|
||||
await adminAgent.delete(`/users/${owner.id}`).expect(403);
|
||||
|
||||
const user = await getUserById(owner.id);
|
||||
expect(user).toBeDefined();
|
||||
});
|
||||
|
||||
test('should fail to delete a user that does not exist', async () => {
|
||||
await ownerAgent.delete(`/users/${uuid()}`).query({ transferId: '' }).expect(404);
|
||||
});
|
||||
|
||||
Reference in New Issue
Block a user