From aa0313c59b69f367a6ba4247a2ba51444040ad78 Mon Sep 17 00:00:00 2001 From: Jose de Soto Date: Fri, 21 Jul 2017 10:41:58 +0200 Subject: [PATCH] del_membership prevent update self user if user_id has a value --- gluon/authapi.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gluon/authapi.py b/gluon/authapi.py index 3347cb68..f28f57a1 100644 --- a/gluon/authapi.py +++ b/gluon/authapi.py @@ -557,7 +557,7 @@ class AuthAPI(object): self.log_event(self.messages['del_membership_log'], dict(user_id=user_id, group_id=group_id)) ret = self.db(membership.user_id == user_id)(membership.group_id == group_id).delete() - if group_id in self.user_groups: + if group_id in self.user_groups and user_id == self.user_id: del self.user_groups[group_id] return ret