Merge pull request #61373 from nextcloud/backport/61368/stable30

Altahrim · web-flow · commit c3c7639c2c74 · 2026-06-17T16:14:08.000+02:00
[stable30] fix: prevent editing delegated admins
diff --git a/lib/private/SubAdmin.php b/lib/private/SubAdmin.php
@@ -268,6 +268,9 @@ public function isUserAccessible(IUser $subadmin, IUser $user): bool {
 		if ($this->groupManager->isAdmin($user->getUID())) {
 			return false;
 		}
+		if ($this->groupManager->isDelegatedAdmin($user->getUID())) {
+			return false;
+		}
 
 		$accessibleGroups = $this->getSubAdminsGroupIds($subadmin);
 		$userGroups = $this->groupManager->getUserGroupIds($user);

Original file line number	Diff line number	Diff line change
`@@ -268,6 +268,9 @@ public function isUserAccessible(IUser $subadmin, IUser $user): bool {`
`268`	`268`	`if ($this->groupManager->isAdmin($user->getUID())) {`
`269`	`269`	`return false;`
`270`	`270`	`}`
	`271`	`+ if ($this->groupManager->isDelegatedAdmin($user->getUID())) {`
	`272`	`+ return false;`
	`273`	`+ }`
`271`	`274`
`272`	`275`	`$accessibleGroups = $this->getSubAdminsGroupIds($subadmin);`
`273`	`276`	`$userGroups = $this->groupManager->getUserGroupIds($user);`