fix(striker-ui-api): don't allow admin to change username

2 years ago · e93c48bec4
parent cbfbc38f10
commit e93c48bec4
1 changed files with 1 additions and 1 deletions
--- a/striker-ui-api/src/lib/request_handlers/user/updateUser.ts
+++ b/striker-ui-api/src/lib/request_handlers/user/updateUser.ts
@ -112,7 +112,7 @@ export const updateUser: RequestHandler<
    }
  }

-  if (userName.length && userName !== xUserName) {
+  if (userName.length && xUserName !== 'admin' && userName !== xUserName) {
    assigns.push(`user_name = '${userName}'`);
  }