proxmox-mirrors/proxmox-backup
1
0
Fork 1
mirror of https://git.proxmox.com/git/proxmox-backup synced 2025-08-13 02:55:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix #4382: api: remove permissions and tokens of user on deletion

Browse Source 
Signed-off-by: Hannes Laimer <h.laimer@proxmox.com>
This commit is contained in:
Hannes Laimer 2025-04-04 17:32:08 +02:00 committed by Thomas Lamprecht
parent d93d7a8299
commit 6f9c16d5d4
1 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
src/api2/access/user.rs
View File

@ -353,6 +353,7 @@ pub async fn update_user(
pub fn delete_user(userid: Userid, digest: Option<String>) -> Result<(), Error> {
let _lock = pbs_config::user::lock_config()?;
let _tfa_lock = crate::config::tfa::write_lock()?;
let _acl_lock = pbs_config::acl::lock_config()?;
let (mut config, expected_digest) = pbs_config::user::config()?;
@ -380,6 +381,22 @@ pub fn delete_user(userid: Userid, digest: Option<String>) -> Result<(), Error>
eprintln!("error updating TFA config after deleting user {userid:?} {err}",);
}
let user_tokens: Vec<ApiToken> = config
.convert_to_typed_array::<ApiToken>("token")?
.into_iter()
.filter(|token| token.tokenid.user().eq(&userid))
.collect();
let (mut acl_tree, _digest) = pbs_config::acl::config()?;
for token in user_tokens {
if let Some(name) = token.tokenid.tokenname() {
do_delete_token(name.to_owned(), &userid, &mut config, &mut acl_tree)?;
}
}
pbs_config::user::save_config(&config)?;
pbs_config::acl::save_config(&acl_tree)?;
Ok(())
}