🛡️ Safety: Prevent self-deactivation and fix staff UI

backend/src/modules/users/user.controller.ts

@@ -44,6 +44,6 @@ export class UsersController {
   @Delete(':id')
   @Roles(UserRole.ADMIN)
   async remove(@CurrentUser() user: any, @Param('id') id: string) {
-    return this.usersService.remove(user.tenantId, id);
+    return this.usersService.remove(user.tenantId, id, user.id);
   }
 }

backend/src/modules/users/user.service.ts

@@ -64,7 +64,10 @@ export class UsersService {
   /**
    * تعطيل مستخدم
    */
-  async remove(tenantId: string, id: string): Promise<void> {
+  async remove(tenantId: string, id: string, currentUserId: string): Promise<void> {
+    if (id === currentUserId) {
+      throw new ConflictException('لا يمكنك تعطيل حسابك الشخصي');
+    }
     const user = await this.findOne(tenantId, id);
     await this.userRepository.update(id, { is_active: false });
   }

frontend/src/pages/staff/StaffPage.tsx

@@ -8,8 +8,10 @@ import { useState, useEffect } from 'react';
 import { Users, UserPlus, Mail, Power } from 'lucide-react';
 import { motion, AnimatePresence } from 'framer-motion';
 import apiClient from '../../api/client';
+import { useAuthStore } from '../../store/authStore';
 
 export const StaffPage = () => {
+    const currentUser = useAuthStore((state) => state.user);
     const [staff, setStaff] = useState<any[]>([]);
     const [isLoading, setIsLoading] = useState(true);
     const [isAddModalOpen, setIsAddModalOpen] = useState(false);
@@ -98,13 +100,15 @@ export const StaffPage = () => {
                                     <Users className="w-7 h-7" />
                                 </div>
                                 <div className="flex gap-2">
-                                    <button 
+                                    {member.id !== currentUser?.id && (
-                                        onClick={() => toggleStatus(member.id)}
+                                        <button 
-                                        className={`p-2 rounded-xl transition-all ${member.is_active ? 'text-emerald-500 bg-emerald-50' : 'text-slate-400 bg-slate-50'}`}
+                                            onClick={() => toggleStatus(member.id)}
-                                        title={member.is_active ? 'تعطيل الحساب' : 'تفعيل الحساب'}
+                                            className={`p-2 rounded-xl transition-all ${member.is_active ? 'text-emerald-500 bg-emerald-50' : 'text-slate-400 bg-slate-50'}`}
-                                    >
+                                            title={member.is_active ? 'تعطيل الحساب' : 'تفعيل الحساب'}
-                                        <Power className="w-4 h-4" />
+                                        >
-                                    </button>
+                                            <Power className="w-4 h-4" />
+                                        </button>
+                                    )}
                                 </div>
                             </div>