From 4c6cb3a678f9a14a85ebdefc2071476b55cfe216 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C3=93scar=20Garc=C3=ADa=20Amor?= <ogarcia@connectical.com>
Date: Fri, 4 Aug 2017 10:58:47 +0200
Subject: [PATCH] Prevent admin user to delete itself

---
 supysonic/templates/users.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/supysonic/templates/users.html b/supysonic/templates/users.html
index 0771e31..f7977f7 100644
--- a/supysonic/templates/users.html
+++ b/supysonic/templates/users.html
@@ -36,8 +36,8 @@
       <td>{% if session.username == user.name %}{{ user.name }}{% else %}
         <a href="{{ url_for('user_profile', uid = user.id) }}">{{ user.name }}</a>{% endif %}</td>
       <td>{{ user.mail }}</td><td>{{ user.admin }}</td><td>{{ user.last_play_date }}</td><td>
-        <a href="{{ url_for('del_user', uid = user.id) }}" aria-label="Delete user">
-          <span class="glyphicon glyphicon-remove-circle" aria-hidden="true" data-toggle="tooltip" data-placement="top" title="Delete user"></span></a></td></tr>
+        {% if session.username != user.name %}<a href="{{ url_for('del_user', uid = user.id) }}" aria-label="Delete user">
+          <span class="glyphicon glyphicon-remove-circle" aria-hidden="true" data-toggle="tooltip" data-placement="top" title="Delete user"></span></a>{% endif %}</td></tr>
     {% endfor %}
   </tbody>
 </table>