fix: 禁止管理员通过 UpdateUser 禁用自己的账号

This commit is contained in:
2026-07-10 14:22:16 +08:00
parent 9fda231d47
commit a98cdb0cac
+4
View File
@@ -144,6 +144,10 @@ func UpdateUser(c *gin.Context) {
updates := map[string]interface{}{}
if req.Status != nil {
if user.ID == currentUserID.(uint) && *req.Status != 1 {
c.JSON(http.StatusBadRequest, gin.H{"error": "不能禁用自己的账号"})
return
}
updates["status"] = *req.Status
}