Closes #168: UI for disabling TOTP as admin

This commit is contained in:
Benjamin Gamard
2019-01-24 20:20:03 +01:00
parent b8c2bd3564
commit fe40a0a677
4 changed files with 34 additions and 3 deletions
@@ -576,7 +576,7 @@ public class UserResource extends BaseResource {
@POST
@Path("{username: [a-zA-Z0-9_]+}/disable_totp")
public Response disableTotpUsername(@PathParam("username") String username) {
if (!authenticate() || principal.isGuest()) {
if (!authenticate()) {
throw new ForbiddenClientException();
}
checkBaseFunction(BaseFunction.ADMIN);