57 lines
1.5 KiB
Rust
57 lines
1.5 KiB
Rust
use crate::routes::admin::util::{
|
|
create_audit_action, flatten_authorized_user, user_has_permission,
|
|
};
|
|
use revolt_database::{util::reference::Reference, AdminAuthorization, Database};
|
|
use revolt_models::v0;
|
|
use revolt_result::{create_error, Result};
|
|
use rocket::State;
|
|
use rocket_empty::EmptyResponse;
|
|
|
|
/// Delete an account. Requires ManageAccounts permissions
|
|
#[openapi(tag = "Admin")]
|
|
#[delete("/accounts/<id>?<case>")]
|
|
pub async fn admin_account_delete(
|
|
db: &State<Database>,
|
|
auth: AdminAuthorization,
|
|
id: Reference<'_>,
|
|
case: Option<&str>,
|
|
) -> Result<EmptyResponse> {
|
|
let user = flatten_authorized_user(&auth);
|
|
if !user_has_permission(user, v0::AdminUserPermissionFlags::ManageAccounts) {
|
|
return Err(create_error!(MissingPermission {
|
|
permission: "ManageAccounts".to_string()
|
|
}));
|
|
}
|
|
|
|
let target = id.as_user(db).await?;
|
|
|
|
if target.privileged {
|
|
return Err(create_error!(PrivilegedAccount));
|
|
}
|
|
|
|
let admin = db.admin_user_fetch(&target.id).await.ok();
|
|
|
|
if let Some(admin) = admin {
|
|
if user_has_permission(&admin, v0::AdminUserPermissionFlags::ManageAccounts) {
|
|
return Err(create_error!(PrivilegedAccount));
|
|
}
|
|
}
|
|
|
|
db.fetch_account(&target.id)
|
|
.await?
|
|
.mark_deleted(db)
|
|
.await?;
|
|
|
|
create_audit_action(
|
|
db,
|
|
&user.id,
|
|
v0::AdminAuditItemActions::DeleteAccount,
|
|
case,
|
|
Some(id.id),
|
|
None,
|
|
)
|
|
.await?;
|
|
|
|
Ok(EmptyResponse)
|
|
}
|