Merge pull request #61371 from nextcloud/backport/61368/stable32

Altahrim · web-flow · commit 7aff6be21caa · 2026-06-17T16:13:50.000+02:00
[stable32] fix: prevent editing delegated admins
diff --git a/lib/private/SubAdmin.php b/lib/private/SubAdmin.php
@@ -248,6 +248,9 @@ public function isUserAccessible(IUser $subadmin, IUser $user): bool {
 		if ($this->groupManager->isAdmin($user->getUID())) {
 			return false;
 		}
+		if ($this->groupManager->isDelegatedAdmin($user->getUID())) {
+			return false;
+		}
 
 		$accessibleGroups = $this->getSubAdminsGroupIds($subadmin);
 		$userGroups = $this->groupManager->getUserGroupIds($user);

Original file line number	Diff line number	Diff line change
`@@ -248,6 +248,9 @@ public function isUserAccessible(IUser $subadmin, IUser $user): bool {`
`248`	`248`	`if ($this->groupManager->isAdmin($user->getUID())) {`
`249`	`249`	`return false;`
`250`	`250`	`}`
	`251`	`+ if ($this->groupManager->isDelegatedAdmin($user->getUID())) {`
	`252`	`+ return false;`
	`253`	`+ }`
`251`	`254`
`252`	`255`	`$accessibleGroups = $this->getSubAdminsGroupIds($subadmin);`
`253`	`256`	`$userGroups = $this->groupManager->getUserGroupIds($user);`