diff --git a/osm_nbi/admin_topics.py b/osm_nbi/admin_topics.py index e560887a44cc5f4906e7d7e2d4450ed0c8771abd..e49680645de5eab0a1c3d8aa0fe9d381fe7ab618 100644 --- a/osm_nbi/admin_topics.py +++ b/osm_nbi/admin_topics.py @@ -1131,6 +1131,16 @@ class UserTopicAuth(UserTopic): http_code=HTTPStatus.BAD_REQUEST, ) + # username change + if indata.get("username"): + if not session.get("admin_show"): + if not indata.get("system_admin_id"): + if _id != session["user_id"]: + raise EngineException( + "You are not allowed to change other users username", + http_code=HTTPStatus.BAD_REQUEST, + ) + # user = self.show(session, _id) # Already in 'content' original_mapping = content["project_role_mappings"]