Server: forbid to remove the root user

[github/Chocobozzz/PeerTube.git] / server / middlewares / validators / users.js

diff --git a/server/middlewares/validators/users.js b/server/middlewares/validators/users.js
index 5defdf4e30d8ace80888db8cb4719684658fe49f..02e4f34cba4fd2072a14452397d044e320917b16 100644 (file)
--- a/server/middlewares/validators/users.js
+++ b/server/middlewares/validators/users.js
@@ -8,9 +8,9 @@ const logger = require('../../helpers/logger')
 const User = mongoose.model('User')
 
 const validatorsUsers = {
-  usersAdd: usersAdd,
-  usersRemove: usersRemove,
-  usersUpdate: usersUpdate
+  usersAdd,
+  usersRemove,
+  usersUpdate
 }
 
 function usersAdd (req, res, next) {
@@ -47,6 +47,8 @@ function usersRemove (req, res, next) {
 
       if (!user) return res.status(404).send('User not found')
 
+      if (user.username === 'root') return res.status(400).send('Cannot remove the root user')
+
       next()
     })
   })