Add checks to prevent unauthorized user deletion

DH-Box / dhbox

A push-button Digital Humanities laboratory.

http://dhbox.org/

GNU General Public License v3.0

125 stars 14 forks source link

Add checks to prevent unauthorized user deletion #141

Closed sabo closed 8 years ago

sabo commented 8 years ago

This changes kill_dhbox to: 1) require that a user is logged in before the box and user is deleted 2) if they're not an admin, that they are the user they are trying to delete

This should fix bug #140

szweibel commented 8 years ago

This looks great, thanks!