Deleting any account deletes the logged-in admin account.

[jakobbouchard]

So I was trying to delete a user from my umami install, and when I clicked delete, it deleted my own account instead, causing me to lose the websites I had under my account. It wasn't super important, so it wasn't too bad, and the session still worked, so I could recreate a non-admin account and give it admin rights by connecting to the database.

I created a second admin account to verify it didn't delete the first admin account, but it seems that it deletes the logged in admin account, no matter the account that is sent to the API.

[jakobbouchard]

Also, once the account is deleted, the session still works, oddly enough, even after closing the browser. The account can still add websites under any account, other than the admin ones, and can still view any stats from any websites.

[briancao]

Confirming bug. Will have a fix out by tomorrow.

[jakobbouchard]

Thanks, really appreciate it 😅 I'm happy that I didn't have anything important on there haha

[mikecao]

Fixed in v1.39.4.