fix: correct user deletion (#10385)

* Ensure all user sessions are cleared

* remove double warning text on user delete
This commit is contained in:
Matthias Mair authored and GitHub committed 2025-09-24 10:22:36 +10:00
1 parent 4681cbbfef
commit 4794d69687
2 files changed
+9

No files matched your search

+8
View File
@@ -144,6 +144,14 @@ class UserDetail(RetrieveUpdateDestroyAPI):
serializer_class = ExtendedUserSerializer
permission_classes = [InvenTree.permissions.StaffRolePermissionOrReadOnly]
def perform_destroy(self, instance):
"""Override destroy method to ensure sessions are deleted first."""
# Remove all sessions for this user
if sessions := instance.usersession_set.all():
sessions.delete()
# Normally delete the user
return super().perform_destroy(instance)
class UserDetailSetPassword(UpdateAPI):
"""Allows superusers to set the password for a user."""