From 6a53fedb36e964a84f3762ba40cfb5b97081c64b Mon Sep 17 00:00:00 2001 From: Antoine Clausse Date: Wed, 27 Aug 2025 11:13:38 +0200 Subject: [PATCH] [web] Add `modify-user-account-status` admin permission check on critical user operations (#27976) * Require `modify-login-status` on `DELETE /admin/user/:user_id` * Require `modify-login-status` on `DELETE /admin/user/:user_id/overleaf` (V1) * Require `modify-login-status` on `DELETE /admin/user/:user_id/generate_password_reset_url` * Require `modify-login-status` on `DELETE /admin/deleted-user/recover/:user_id` * Update tests * Add `ol-adminCapabilities` to deleted-user-show.pug * Remove user-list checkboxes for admins without `modify-login-status` * Update tests * Rename 'modify-login-status' to 'modify-user-account-status' GitOrigin-RevId: d3c2d0d96b79150f32cb58bfdf65042d7d447636 --- services/web/types/admin-capabilities.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/web/types/admin-capabilities.ts b/services/web/types/admin-capabilities.ts index cd1d3326a4..8d2c28bf09 100644 --- a/services/web/types/admin-capabilities.ts +++ b/services/web/types/admin-capabilities.ts @@ -8,9 +8,9 @@ export type AdminCapability = | 'modify-group-manager' | 'modify-group-member' | 'modify-group-setting' - | 'modify-login-status' | 'modify-managed-group' | 'modify-managed-group-member' + | 'modify-user-account-status' | 'modify-project' | 'manage-survey' | 'modify-split-test'