diff --git a/src/modules/api/admin/oauth2-admin.controller.ts b/src/modules/api/admin/oauth2-admin.controller.ts index 23f239c..451c98d 100644 --- a/src/modules/api/admin/oauth2-admin.controller.ts +++ b/src/modules/api/admin/oauth2-admin.controller.ts @@ -312,7 +312,9 @@ export class OAuth2AdminController { ); } - if (client.activated) { + const isAdmin = this._service.userHasPrivilege(user, 'admin:oauth2'); + + if (client.activated && isAdmin) { throw new BadRequestException('Please deactivate the client first.'); }