Disallow renaming admin role

qwc-services · Jun 15, 2023 · 1e8b7cb · 1e8b7cb
1 parent 5acaf97
commit 1e8b7cb
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/controllers/roles_controller.py b/controllers/roles_controller.py
@@ -1,5 +1,6 @@
 from .controller import Controller
 from forms import RoleForm
+from flask import flash, Markup
 
 
 class RolesController(Controller):
@@ -92,7 +93,10 @@ def create_or_update_resources(self, resource, form, session):
             role = resource
 
         # update role
-        role.name = form.name.data
+        if role.name != "admin":
+            role.name = form.name.data
+        elif form.name.data != "admin":
+            flash(Markup("The <code>admin</code> role cannot be renamed."), 'warning')
         role.description = form.description.data
 
         # update groups