createUserAccountService(); if (($_SERVER['REQUEST_METHOD'] ?? 'GET') !== 'POST') { Router::redirect('admin/users'); return; } $uuid = trim((string) ($id ?? '')); $currentUserId = (int) ($_SESSION['user']['id'] ?? 0); $user = $uuid !== '' ? $userAccountService->findByUuid($uuid) : null; $userId = (int) ($user['id'] ?? 0); if ($userId > 0 && $currentUserId !== $userId && !directoryServicesFactory()->createDirectoryScopeGateway()->canAccess('users', $userId, $currentUserId)) { if (Request::wantsJson()) { http_response_code(403); Router::json(['error' => 'permission_denied']); return; } Router::redirect('error/forbidden'); return; } $result = $userAccountService->setActiveByUuid($uuid, true, $currentUserId); if ($result['ok'] ?? false) { if (Request::wantsJson()) { http_response_code(204); return; } } elseif (Request::wantsJson()) { http_response_code((int) ($result['status'] ?? 404)); Router::json(['error' => 'not_found']); return; } Router::redirect('admin/users');