Prevent deletion of family members from contact list

2026-04-28 22:17:21 -03:00
parent 7174bd6560
commit 4d3c2688fe
3 changed files with 73 additions and 4 deletions
@@ -138,6 +138,13 @@ router.put('/:id', (req, res) => {
 router.delete('/:id', (req, res) => {
  try {
    const id     = parseInt(req.params.id, 10);
+    const contact = db.get().prepare('SELECT family_user_id FROM contacts WHERE id = ?').get(id);
+    if (!contact) return res.status(404).json({ error: 'Kontakt nicht gefunden', code: 404 });
+    
+    if (contact.family_user_id) {
+      return res.status(403).json({ error: 'Familienmitglieder können nicht aus der Kontaktliste gelöscht werden.', code: 403 });
+    }
+
    const result = db.get().prepare('DELETE FROM contacts WHERE id = ?').run(id);
    if (result.changes === 0)
      return res.status(404).json({ error: 'Kontakt nicht gefunden', code: 404 });