github
/
jumpserver
mirror of https://github.com/jumpserver/jumpserver
1
0
Fork 0
Code Issues Releases Wiki Activity

fix: 用户不能禁用或启用自己

pull/6831/head
xinwen 2021-09-13 19:40:25 +08:00 committed by Jiangjie.Bai
parent 84d6b3de26
commit 6695d0a8a2
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
apps/users/serializers/user.py
View File

@ -169,6 +169,16 @@ class UserSerializer(CommonBulkSerializerMixin, serializers.ModelSerializer):
self.context['request'], self.context['view'], obj self.context['request'], self.context['view'], obj
) )
def update(self, instance, validated_data):
request = self.context.get('request')
if request:
user = request.user
if user.id == instance.id:
# 用户自己不能禁用启用自己
validated_data.pop('is_active', None)
return super(UserSerializer, self).update(instance, validated_data)
class UserRetrieveSerializer(UserSerializer): class UserRetrieveSerializer(UserSerializer):
login_confirm_settings = serializers.PrimaryKeyRelatedField(read_only=True, login_confirm_settings = serializers.PrimaryKeyRelatedField(read_only=True,