Allow district admin to delete users (#1738)

ohcnetwork · Dec 7, 2023 · 26d5a6d · 26d5a6d
1 parent df576b0
commit 26d5a6d
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/care/users/api/viewsets/users.py b/care/users/api/viewsets/users.py
@@ -151,6 +151,12 @@ def destroy(self, request, *args, **kwargs):
                 user_type__lt=User.TYPE_VALUE_MAP["StateAdmin"],
                 is_superuser=False,
             )
+        elif request.user.user_type == User.TYPE_VALUE_MAP["DistrictAdmin"]:
+            queryset = queryset.filter(
+                district=request.user.district,
+                user_type__lt=User.TYPE_VALUE_MAP["DistrictAdmin"],
+                is_superuser=False,
+            )
         else:
             return Response(
                 status=status.HTTP_403_FORBIDDEN, data={"permission": "Denied"}