From 8e2589dbc133da856d2ef7efc5f9524d4558b840 Mon Sep 17 00:00:00 2001
From: Mia Winter <mia@miawinter.de>
Date: Mon, 22 Jan 2024 11:18:46 +0100
Subject: [PATCH] fixed ManageUser allowing to add roles to oneself

---
 Wave/Components/Pages/ManageUsers.razor | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/Wave/Components/Pages/ManageUsers.razor b/Wave/Components/Pages/ManageUsers.razor
index d69a95f..c2c0f14 100644
--- a/Wave/Components/Pages/ManageUsers.razor
+++ b/Wave/Components/Pages/ManageUsers.razor
@@ -1,5 +1,4 @@
 @page "/manage/users"
-@using Microsoft.AspNetCore.Authorization
 @using Microsoft.AspNetCore.Identity
 @using Wave.Data
 @using Humanizer
@@ -93,12 +92,17 @@
     }
 
     private async Task Add() {
+	    if (User is null) return;
         var user = await UserManager.FindByNameAsync(UserName);
 
         if (user is null) {
             Toast.ShowError(Localizer["Error_UserNotFound"]);
             return;
         }
+        if (user.Id == User.Id) {
+	        Toast.ShowError(Localizer["Error_EditSelf"]);
+	        return;
+        }
 
         if (!await RoleManager.RoleExistsAsync(CurrentRole.ToString())) {
             var result = await RoleManager.CreateAsync(new IdentityRole(CurrentRole.ToString()));