aljaz/btcpayserver
1
0
Fork 0
mirror of https://github.com/aljazceru/btcpayserver.git synced 2026-01-06 23:54:28 +01:00
Code Issues Packages Projects Releases Wiki Activity

Remove CanDeleteUser constraint from "/api/v1/users/{userId}" endpoint

Browse Source
This commit is contained in:
Umar Bolatov
2021-04-07 20:48:38 -07:00
parent d9935ada9d
commit 9fc2d2b76b
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
BTCPayServer/Controllers/GreenField/UsersController.cs
View File

@@ -197,7 +197,7 @@ namespace BTCPayServer.Controllers.GreenField
}
[HttpDelete("~/api/v1/users/{userId}")]
[Authorize(Policy = Policies.CanDeleteUser, AuthenticationSchemes = AuthenticationSchemes.GreenfieldAPIKeys)]
[Authorize(AuthenticationSchemes = AuthenticationSchemes.GreenfieldAPIKeys)]
public async Task<ActionResult<ApplicationUserData>> DeleteUser(string userId)
{
// Only admins should be allowed to delete users