diff --git a/apps/api/src/auth/auth.service.ts b/apps/api/src/auth/auth.service.ts index e98c17943..7ccaf7fee 100644 --- a/apps/api/src/auth/auth.service.ts +++ b/apps/api/src/auth/auth.service.ts @@ -356,7 +356,12 @@ export class AuthService { await this.authenticateAdmin() // check if user is admin before attempting to activate/deactivate const userGroups = await this.admin.users.listRoleMappings({ id: keycloakId }) - const isAdmin = userGroups.realmMappings?.some((obj) => obj.name === 'podkrepi-admin') + const isAdmin = userGroups.realmMappings?.some( + (obj) => + obj.name === 'team-support' || + obj.name === 'view-supporters' || + obj.name === 'view-contact-requests', + ) if (isAdmin) { throw new ForbiddenException("Admin profiles can't be deactivated") }