diff --git a/settings/ajax/togglegroups.php b/settings/ajax/togglegroups.php index de941f991320f7fffb5b101ab910f339e2fbe996..931ab2689e25aae8aebceab243845b90775b1c89 100644 --- a/settings/ajax/togglegroups.php +++ b/settings/ajax/togglegroups.php @@ -7,6 +7,12 @@ $success = true; $username = $_POST["username"]; $group = OC_Util::sanitizeHTML($_POST["group"]); +if($username == OC_User::getUser() && $group == "admin" && OC_Group::inGroup($username, 'admin')){ + $l = OC_L10N::get('core'); + OC_JSON::error(array( 'data' => array( 'message' => $l->t('Admins can\'t remove themself from the admin group')))); + exit(); +} + if(!OC_Group::inGroup(OC_User::getUser(), 'admin') && (!OC_SubAdmin::isUserAccessible(OC_User::getUser(), $username) || !OC_SubAdmin::isGroupAccessible(OC_User::getUser(), $group))) { $l = OC_L10N::get('core'); OC_JSON::error(array( 'data' => array( 'message' => $l->t('Authentication error') ))); diff --git a/settings/js/users.js b/settings/js/users.js index 517984f92475b88e2a50932086dccc75d2c9f01d..af83e0321a58e7a95f17c0aa46a41f84aa95187e 100644 --- a/settings/js/users.js +++ b/settings/js/users.js @@ -165,9 +165,6 @@ var UserList={ } if(user){ var checkHandeler=function(group){ - if(user==OC.currentUser && group=='admin'){ - return false; - } if(!isadmin && checked.length == 1 && checked[0] == group){ return false; }