[web] Add modify-user-account-status admin permission check on critical user operations (#27976)
* Require `modify-login-status` on `DELETE /admin/user/:user_id` * Require `modify-login-status` on `DELETE /admin/user/:user_id/overleaf` (V1) * Require `modify-login-status` on `DELETE /admin/user/:user_id/generate_password_reset_url` * Require `modify-login-status` on `DELETE /admin/deleted-user/recover/:user_id` * Update tests * Add `ol-adminCapabilities` to deleted-user-show.pug * Remove user-list checkboxes for admins without `modify-login-status` * Update tests * Rename 'modify-login-status' to 'modify-user-account-status' GitOrigin-RevId: d3c2d0d96b79150f32cb58bfdf65042d7d447636
This commit is contained in:
@@ -8,9 +8,9 @@ export type AdminCapability =
|
||||
| 'modify-group-manager'
|
||||
| 'modify-group-member'
|
||||
| 'modify-group-setting'
|
||||
| 'modify-login-status'
|
||||
| 'modify-managed-group'
|
||||
| 'modify-managed-group-member'
|
||||
| 'modify-user-account-status'
|
||||
| 'modify-project'
|
||||
| 'manage-survey'
|
||||
| 'modify-split-test'
|
||||
|
||||
Reference in New Issue
Block a user