fix(user): prevent deletion and password modification of admin user in demo mode

This commit is contained in:
Chang lue Tsen
2025-07-02 12:39:30 -04:00
parent d26bc7f40b
commit 0825ac525d
3 changed files with 23 additions and 1 deletions
@@ -2,6 +2,8 @@ package user
import (
"context"
"os"
"strings"
"github.com/perfect-panel/server/internal/svc"
"github.com/perfect-panel/server/internal/types"
@@ -25,6 +27,11 @@ func NewDeleteUserLogic(ctx context.Context, svcCtx *svc.ServiceContext) *Delete
}
func (l *DeleteUserLogic) DeleteUser(req *types.GetDetailRequest) error {
isDemo := strings.ToLower(os.Getenv("PPANEL_MODE")) == "demo"
if req.Id == 2 && isDemo {
return errors.Wrapf(xerr.NewErrCodeMsg(503, "Demo mode does not allow deletion of the admin user"), "delete user failed: cannot delete admin user in demo mode")
}
err := l.svcCtx.UserModel.Delete(l.ctx, req.Id)
if err != nil {
return errors.Wrapf(xerr.NewErrCode(xerr.DatabaseDeletedError), "delete user error: %v", err.Error())