31b1a73e1f
There was no "isAdminUser()" function which returned bool. This is irritiating as there were a loooooooot of places in the code which checked this itself with `OC_Group::inGroup($uid, 'admin)` - why not use a function for this? (Especially if you consider that we might change the group name in the future, which would lead to problems then) Additionally, @Raydiation needed such a method for his AppFramework :)
25 lines
670 B
PHP
25 lines
670 B
PHP
<?php
|
|
|
|
OC_JSON::checkSubAdminUser();
|
|
OCP\JSON::callCheck();
|
|
|
|
$username = $_POST["username"];
|
|
|
|
// A user shouldn't be able to delete his own account
|
|
if(OC_User::getUser() === $username) {
|
|
exit;
|
|
}
|
|
|
|
if(!OC_User::isAdminUser(OC_User::getUser()) && !OC_SubAdmin::isUserAccessible(OC_User::getUser(), $username)) {
|
|
$l = OC_L10N::get('core');
|
|
OC_JSON::error(array( 'data' => array( 'message' => $l->t('Authentication error') )));
|
|
exit();
|
|
}
|
|
|
|
// Return Success story
|
|
if( OC_User::deleteUser( $username )) {
|
|
OC_JSON::success(array("data" => array( "username" => $username )));
|
|
}
|
|
else{
|
|
OC_JSON::error(array("data" => array( "message" => $l->t("Unable to delete user") )));
|
|
}
|