fix #4965 - improve user/site management

2025-01-21 12:21:27 -05:00
parent 4793ab4bc9
commit 16477052e2
10 changed files with 187 additions and 105 deletions
--- a/Oqtane.Server/Controllers/UserController.cs
+++ b/Oqtane.Server/Controllers/UserController.cs
@ -217,7 +217,7 @@ namespace Oqtane.Controllers

        // DELETE api/<controller>/5?siteid=x
        [HttpDelete("{id}")]
-        [Authorize(Policy = $"{EntityNames.User}:{PermissionNames.Write}:{RoleNames.Admin}")]
+        [Authorize(Policy = $"{EntityNames.User}:{PermissionNames.Write}:{RoleNames.Host}")]
        public async Task Delete(int id, string siteid)
        {
            User user = _users.GetUser(id, false);