From 3e9746bec754cef62979afaef2b906b3cca42f0d Mon Sep 17 00:00:00 2001
From: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
Date: Wed, 17 Jun 2026 10:18:54 +0200
Subject: [PATCH] fix: prevent editing delegated admins

Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
---
 lib/private/SubAdmin.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/lib/private/SubAdmin.php b/lib/private/SubAdmin.php
index 90756e2d3fd..79d403e9bc2 100644
--- a/lib/private/SubAdmin.php
+++ b/lib/private/SubAdmin.php
@@ -248,6 +248,9 @@ class SubAdmin extends PublicEmitter implements ISubAdmin {
 		if ($this->groupManager->isAdmin($user->getUID())) {
 			return false;
 		}
+		if ($this->groupManager->isDelegatedAdmin($user->getUID())) {
+			return false;
+		}
 
 		$accessibleGroups = $this->getSubAdminsGroupIds($subadmin);
 		$userGroups = $this->groupManager->getUserGroupIds($user);