Revize 3ca2fe2c

Changed that user with ADMIN rights can not be removed

re #9755

backend/src/main/java/cz/zcu/kiv/backendapi/user/UserServiceImpl.java

@@ -93 +93 @@
     //TODO maybe check if user is not deleting himself - or it might be ok
     @Override
     public void deleteUser(String username) {
-        if (!userRepository.existsById(username)) {
+        UserEntity userEntity = userRepository.findByEmail(username).orElseThrow(() -> {
             log.error(String.format(USER_NOT_FOUND, username));
             throw new UsernameNotFoundException(String.format(USER_NOT_FOUND, username));
+        });
+        if (userEntity.isAdmin()) {
+            log.error("User with ADMIN rights can not be deleted");
+            throw new ApiRequestException("User with ADMIN rights can not be deleted", HttpStatus.BAD_REQUEST);
         }
-        userRepository.deleteById(username);
+        userRepository.delete(userEntity);
     }
 
     @Override