Don't allow deleted users to do actions. Fixes #1656 (#1704)

This commit is contained in:
Dessalines 2021-08-16 16:51:08 -04:00 committed by GitHub
parent 32874163a8
commit 2966203653
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -272,6 +272,11 @@ pub async fn get_local_user_view_from_jwt(
return Err(ApiError::err("site_ban").into()); return Err(ApiError::err("site_ban").into());
} }
// Check for user deletion
if local_user_view.person.deleted {
return Err(ApiError::err("deleted").into());
}
check_validator_time(&local_user_view.local_user.validator_time, &claims)?; check_validator_time(&local_user_view.local_user.validator_time, &claims)?;
Ok(local_user_view) Ok(local_user_view)