Do not allow changing tokens, user role, or delete users

user/types.go

@@ -244,16 +244,17 @@ const (
 
 // Error constants used by the package
 var (
-	ErrUnauthenticated               = errors.New("unauthenticated")
-	ErrUnauthorized                  = errors.New("unauthorized")
-	ErrInvalidArgument               = errors.New("invalid argument")
-	ErrUserNotFound                  = errors.New("user not found")
-	ErrUserExists                    = errors.New("user already exists")
-	ErrPasswordHashInvalid           = errors.New("password hash but be a bcrypt hash, use 'ntfy user hash' to generate")
-	ErrTierNotFound                  = errors.New("tier not found")
-	ErrTokenNotFound                 = errors.New("token not found")
-	ErrPhoneNumberNotFound           = errors.New("phone number not found")
-	ErrTooManyReservations           = errors.New("new tier has lower reservation limit")
-	ErrPhoneNumberExists             = errors.New("phone number already exists")
-	ErrProvisionedUserPasswordChange = errors.New("cannot change password of provisioned user")
+	ErrUnauthenticated        = errors.New("unauthenticated")
+	ErrUnauthorized           = errors.New("unauthorized")
+	ErrInvalidArgument        = errors.New("invalid argument")
+	ErrUserNotFound           = errors.New("user not found")
+	ErrUserExists             = errors.New("user already exists")
+	ErrPasswordHashInvalid    = errors.New("password hash but be a bcrypt hash, use 'ntfy user hash' to generate")
+	ErrTierNotFound           = errors.New("tier not found")
+	ErrTokenNotFound          = errors.New("token not found")
+	ErrPhoneNumberNotFound    = errors.New("phone number not found")
+	ErrTooManyReservations    = errors.New("new tier has lower reservation limit")
+	ErrPhoneNumberExists      = errors.New("phone number already exists")
+	ErrProvisionedUserChange  = errors.New("cannot change or delete provisioned user")
+	ErrProvisionedTokenChange = errors.New("cannot change or delete provisioned token")
 )