usuarios en cliente

backend/app/api/v1/endpoints/users.py

@@ -286,8 +286,9 @@ async def delete_user(
     - No se puede eliminar a sí mismo
     - No se puede eliminar el último ADMIN del tenant
     """
-    # Verificar permisos - solo ADMIN puede eliminar
-    if current_user.role != UserRole.ADMIN:
+    # Verificar permisos - ADMIN global o CLIENT_ADMIN pueden eliminar
+    allowed = [UserRole.ADMIN, UserRole.CLIENT_ADMIN]
+    if current_user.role not in allowed:
         raise HTTPException(
             status_code=status.HTTP_403_FORBIDDEN,
             detail="Only admins can delete users"
@@ -334,8 +335,8 @@ async def delete_user(
                 detail="Cannot delete the last active admin of the tenant"
             )
     
-    # Soft delete
-    db_user.is_active = False
+    # Hard delete
+    await db.delete(db_user)
     await db.commit()
     
     # Registrar eliminación en auditoría

backend/fix_delete.py

@@ -0,0 +1,15 @@
+with open("/app/app/api/v1/endpoints/users.py", "r") as f:
+    content = f.read()
+
+old = '    # Verificar permisos - solo ADMIN puede eliminar\n    if current_user.role != UserRole.ADMIN:\n        raise HTTPException(\n            status_code=status.HTTP_403_FORBIDDEN,\n            detail="Only admins can delete users"\n        )'
+
+new = '    # Verificar permisos - ADMIN global o CLIENT_ADMIN pueden eliminar\n    allowed = [UserRole.ADMIN, UserRole.CLIENT_ADMIN]\n    if current_user.role not in allowed:\n        raise HTTPException(\n            status_code=status.HTTP_403_FORBIDDEN,\n            detail="Only admins can delete users"\n        )'
+
+if old in content:
+    content = content.replace(old, new)
+    print("OK: permisos delete actualizados")
+else:
+    print("ERROR: bloque no encontrado")
+
+with open("/app/app/api/v1/endpoints/users.py", "w") as f:
+    f.write(content)

backend/fix_delete2.py

@@ -0,0 +1,14 @@
+with open("/app/app/api/v1/endpoints/users.py", "r") as f:
+    content = f.read()
+
+old = "    # Soft delete\n    db_user.is_active = False\n    await db.commit()"
+new = "    # Hard delete\n    await db.delete(db_user)\n    await db.commit()"
+
+if old in content:
+    content = content.replace(old, new)
+    print("OK: hard delete aplicado")
+else:
+    print("ERROR: bloque no encontrado")
+
+with open("/app/app/api/v1/endpoints/users.py", "w") as f:
+    f.write(content)