sjg/trx-rs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Protect the final administrator

Browse Source
This commit is contained in:
sjg
2026-08-11 00:39:25 +02:00
parent e4cce9a004
commit 36c1e56efa
3 changed files with 33 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/trx-client/trx-frontend/trx-frontend-http/assets/web/generated/app.js
+6 -1
View File
@@ -6066,6 +6066,7 @@ async function refreshUserManagement() {
const list = requiredElement("user-list");
try {
const users = await listUsers();
const adminCount = users.filter((user) => user.role === "admin").length;
list.replaceChildren(...users.map((user) => {
const row = document.createElement("div");
row.className = "sch-row";
@@ -6082,6 +6083,9 @@ async function refreshUserManagement() {
option.selected = user.role === value;
role.append(option);
}
const isOnlyAdmin = user.role === "admin" && adminCount === 1;
role.disabled = isOnlyAdmin;
if (isOnlyAdmin) role.title = "The final administrator cannot be demoted";
const password = document.createElement("input");
password.type = "password";
password.placeholder = "New password";
@@ -6100,7 +6104,8 @@ async function refreshUserManagement() {
remove.type = "button";
remove.textContent = "Remove";
remove.className = "danger";
remove.disabled = user.username === authUsername;
remove.disabled = user.username === authUsername || isOnlyAdmin;
if (isOnlyAdmin) remove.title = "The final administrator cannot be removed";
remove.addEventListener("click", async () => {
if (await window.trxUi.confirm({ title: "Remove user?", message: `Remove ${user.username} and revoke their sessions?`, confirmLabel: "Remove", danger: true })) {
await runUserOperation(() => deleteUser(user.username));