diff --git a/src/backend/api/v1/users/endpoints.py b/src/backend/api/v1/users/endpoints.py index 02a60a5..15e6422 100644 --- a/src/backend/api/v1/users/endpoints.py +++ b/src/backend/api/v1/users/endpoints.py @@ -119,7 +119,7 @@ def delete_user( ) -> tuple[HTTPStatus, None]: user = get_object_or_404(User, pk=user_id) - current_user = request.user + current_user = request.auth if str(user.pk) == str(current_user.pk): raise ValidationError({"user": "You cannot delete your own account."}) @@ -142,7 +142,7 @@ def assign_role( ) -> tuple[HTTPStatus, UserOut]: user = get_object_or_404(User, pk=user_id) - current_user = request.user + current_user = request.auth if str(user.pk) == str(current_user.pk): raise ValidationError({"user": "You cannot change your own role."})