[web] Add modify-user-account-status admin permission check on critical user operations (#27976)

* Require `modify-login-status` on `DELETE /admin/user/:user_id`

* Require `modify-login-status` on `DELETE /admin/user/:user_id/overleaf` (V1)

* Require `modify-login-status` on `DELETE /admin/user/:user_id/generate_password_reset_url`

* Require `modify-login-status` on `DELETE /admin/deleted-user/recover/:user_id`

* Update tests

* Add `ol-adminCapabilities` to deleted-user-show.pug

* Remove user-list checkboxes for admins without `modify-login-status`

* Update tests

* Rename 'modify-login-status' to 'modify-user-account-status'

GitOrigin-RevId: d3c2d0d96b79150f32cb58bfdf65042d7d447636
This commit is contained in:
Antoine Clausse
2025-08-28 08:05:26 +00:00
committed by Copybot
parent f3671586e7
commit 6a53fedb36
+1 -1
View File
@@ -8,9 +8,9 @@ export type AdminCapability =
| 'modify-group-manager'
| 'modify-group-member'
| 'modify-group-setting'
| 'modify-login-status'
| 'modify-managed-group'
| 'modify-managed-group-member'
| 'modify-user-account-status'
| 'modify-project'
| 'manage-survey'
| 'modify-split-test'