[FIX] Avoid last admin deactivate itself

server/methods/setUserActiveStatus.js

@@ -1,9 +1,19 @@
 import { Meteor } from 'meteor/meteor';
 import { check } from 'meteor/check';
 
+import { Users } from '../../app/models/server';
 import { hasPermission } from '../../app/authorization';
 import { setUserActiveStatus } from '../../app/lib/server/functions/setUserActiveStatus';
 
+const getAdminCount = () => {
+	Meteor.users.find({
+		roles: {
+			$in: ['admin'],
+		},
+		active: true,
+	}).count();
+};
+
 Meteor.methods({
 	setUserActiveStatus(userId, active, confirmRelenquish) {
 		check(userId, String);
@@ -21,8 +31,16 @@ Meteor.methods({
 			});
 		}
 
-		setUserActiveStatus(userId, active, confirmRelenquish);
+		const userAdmin = Users.findOneAdmin(userId.count);
+
+		if (userAdmin && getAdminCount() === 1) {
+			throw new Meteor.Error('error-action-not-allowed', 'Leaving the app without an active admin is not allowed', {
+				method: 'removeUserFromRole',
+				action: 'Remove_last_admin',
+			});
+		}
 
+		setUserActiveStatus(userId, active, confirmRelenquish);
 		return true;
 	},
 });