Fix: authorization issue (#3530)

### What problem does this PR solve?


### Type of change

- [x] Bug Fix (non-breaking change which fixes an issue)
This commit is contained in:
Kevin Hu 2024-11-20 17:57:45 +08:00 committed by Yingfeng Zhang
parent 5b44b99cfd
commit 541272eb99

View File

@ -83,7 +83,7 @@ def create(tenant_id):
@manager.route('/<tenant_id>/user/<user_id>', methods=['DELETE'])
@login_required
def rm(tenant_id, user_id):
if current_user.id != tenant_id:
if current_user.id != tenant_id and current_user.id != user_id:
return get_json_result(
data=False,
message='No authorization.',