Skip to content

Commit a948372

Browse files
committed
enhancement: add check against deleting of example users
1 parent dad3ca7 commit a948372

1 file changed

Lines changed: 5 additions & 0 deletions

File tree

‎app/api/auth.py‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -190,6 +190,11 @@ def delete_me(
190190
status_code=status.HTTP_403_FORBIDDEN,
191191
detail="Admin users cannot delete themselves",
192192
)
193+
if user.email == "user@example.com" or user.email == "admin@example.com":
194+
raise HTTPException(
195+
status_code=status.HTTP_403_FORBIDDEN,
196+
detail="Cannot delete the example users",
197+
)
193198
session.exec(delete(Item).where(Item.owner_id == user.id))
194199
session.delete(user)
195200
session.commit()

0 commit comments

Comments
 (0)