🛡️ Safety: Prevent self-deactivation and fix staff UI

2026-04-19 15:54:50 +03:00
parent ff8126f93b
commit 6b9ce6e95b
3 changed files with 16 additions and 9 deletions
--- a/backend/src/modules/users/user.service.ts
+++ b/backend/src/modules/users/user.service.ts
@@ -64,7 +64,10 @@ export class UsersService {
  /**
   * تعطيل مستخدم
   */
-  async remove(tenantId: string, id: string): Promise<void> {
+  async remove(tenantId: string, id: string, currentUserId: string): Promise<void> {
+    if (id === currentUserId) {
+      throw new ConflictException('لا يمكنك تعطيل حسابك الشخصي');
+    }
    const user = await this.findOne(tenantId, id);
    await this.userRepository.update(id, { is_active: false });
  }