harden account deletion
This commit is contained in:
@ -70,9 +70,9 @@ defmodule CanneryWeb.UserSettingsController do
|
||||
end
|
||||
end
|
||||
|
||||
def delete(conn, %{"id" => user_id}) do
|
||||
if user_id == conn.assigns.current_user.id do
|
||||
Accounts.delete_user!(conn.assigns.current_user)
|
||||
def delete(%{assigns: %{current_user: current_user}} = conn, %{"id" => user_id}) do
|
||||
if user_id == current_user.id do
|
||||
current_user |> Accounts.delete_user!(current_user)
|
||||
|
||||
conn
|
||||
|> put_flash(:error, dgettext("prompts", "Your account has been deleted"))
|
||||
|
Reference in New Issue
Block a user