Allow admins to register other admins

Author: tollsimy

src/handlers/session.go

@@ -80,7 +80,7 @@ func (h *SessionHandlers) Register(c *gin.Context) {
 		c.JSON(http.StatusForbidden, gin.H{"error": "Superuser registration is not allowed"})
 		return
 	}
-	// If registering as admin, you need to be a superuser
+	// If registering as admin, you need to be a superuser or admin
 	if *newUser.Role == api.UserRequestRoleAdmin {
 		// Check if the current user is authenticated with superuser privileges
 		_, role, err := auth.AuthenticationFunc(c.GetHeader("Authorization"))
@@ -89,7 +89,7 @@ func (h *SessionHandlers) Register(c *gin.Context) {
 			return
 		}
 		// Check if the user has superuser privileges
-		if role != "superuser" {
+		if role != "superuser" && role != "admin" {
 			c.JSON(http.StatusForbidden, gin.H{"error": "Superuser privileges required to register " + string(*newUser.Role) + " accounts"})
 			return
 		}