diff --git a/account_manager/views/user_views.py b/account_manager/views/user_views.py index 41fe2ee..b019c92 100644 --- a/account_manager/views/user_views.py +++ b/account_manager/views/user_views.py @@ -102,8 +102,11 @@ def realm_user_delete(request, realm_id, user_dn): LdapUser.base_dn = f'ou=people,{realm.ldap_base_dn}' LdapGroup.base_dn = f'ou=groups,{realm.ldap_base_dn}' ldap_user = LdapUser.objects.get(dn=user_dn) - user_delete_controller(ldap_user, realm) - return redirect('realm-user-list', realm_id) + if _is_deleteable_user(realm, ldap_user): + user_delete_controller(ldap_user, realm) + return redirect('realm-user-list', realm_id) + else: + return redirect('permission-denied') @login_required diff --git a/templates/permission_denied.jinja2 b/templates/permission_denied.jinja2 index f300fe3..76ff08f 100644 --- a/templates/permission_denied.jinja2 +++ b/templates/permission_denied.jinja2 @@ -1,4 +1,11 @@ {% extends 'base.jinja2' %} {% block content %} -

Leider hast du keine Rechte :´(

+
+
+
+

Leider hast du keine Rechte :´(

+ Zurück zur Startseite +
+
+
{% endblock %} \ No newline at end of file