Fix RBAC client action visibility

2026-07-21 21:39:56 +01:00
parent 5eff70755b
commit cfca5bfe3b
6 changed files with 38 additions and 10 deletions
@@ -234,7 +234,14 @@ module.exports = function registerAdminRbacRoutes(app, deps) {
        return res.status(404).send('Role not found.');
      }

-      res.send(pages.renderRbacEditPage(viewModel.role, req.query.message ? String(req.query.message) : '', req.currentUser, viewModel.permissionGroups, viewModel.users));
+      const currentUserId = req.currentUser ? Number(req.currentUser.id) : null;
+      const users = Array.isArray(viewModel.users)
+        ? viewModel.users.filter(function (user) {
+          return Number(user && user.id) !== currentUserId;
+        })
+        : [];
+
+      res.send(pages.renderRbacEditPage(viewModel.role, req.query.message ? String(req.query.message) : '', req.currentUser, viewModel.permissionGroups, users));
    } catch (error) {
      next(error);
    }