feat: Add user deletion capability for admins, add WhiteNoise for Django admin static assets, and configure CSRF_TRUSTED_ORIGINS for production reverse proxies
This commit is contained in:
@@ -69,6 +69,17 @@ class AdminUserViewSet(viewsets.ModelViewSet):
|
||||
serializer_class = AdminUserSerializer
|
||||
permission_classes = [permissions.IsAdminUser]
|
||||
|
||||
def destroy(self, request, *args, **kwargs):
|
||||
user_to_delete = self.get_object()
|
||||
if user_to_delete.id == request.user.id:
|
||||
return Response(
|
||||
{'error': 'Du kannst dein eigenes Admin-Konto nicht selbst löschen.'},
|
||||
status=status.HTTP_400_BAD_REQUEST
|
||||
)
|
||||
name = user_to_delete.get_display_name()
|
||||
user_to_delete.delete()
|
||||
return Response({'message': f'Benutzer "{name}" wurde erfolgreich gelöscht.'})
|
||||
|
||||
class RegisterView(views.APIView):
|
||||
permission_classes = [permissions.AllowAny]
|
||||
|
||||
|
||||
Reference in New Issue
Block a user