fix: prevent editing delegated admins

Altahrim · backportbot[bot] · commit aa8f2c9b132a · 2026-06-17T09:28:45.000Z
Signed-off-by: Benjamin Gaussorgues &lt;benjamin.gaussorgues@nextcloud.com&gt;
diff --git a/lib/private/SubAdmin.php b/lib/private/SubAdmin.php
@@ -248,6 +248,9 @@ public function isUserAccessible(IUser $subadmin, IUser $user): bool {
 		if ($this->groupManager->isAdmin($user->getUID())) {
 			return false;
 		}
+		if ($this->groupManager->isDelegatedAdmin($user->getUID())) {
+			return false;
+		}
 
 		$accessibleGroups = $this->getSubAdminsGroupIds($subadmin);
 		$userGroups = $this->groupManager->getUserGroupIds($user);

Original file line number	Diff line number	Diff line change
`@@ -248,6 +248,9 @@ public function isUserAccessible(IUser $subadmin, IUser $user): bool {`
`248`	`248`	`if ($this->groupManager->isAdmin($user->getUID())) {`
`249`	`249`	`return false;`
`250`	`250`	`}`
	`251`	`+ if ($this->groupManager->isDelegatedAdmin($user->getUID())) {`
	`252`	`+ return false;`
	`253`	`+ }`
`251`	`254`
`252`	`255`	`$accessibleGroups = $this->getSubAdminsGroupIds($subadmin);`
`253`	`256`	`$userGroups = $this->groupManager->getUserGroupIds($user);`