various improvements

setup.cfg

@@ -70,7 +70,7 @@ install_requires =
     python-slugify==8.0.4
     python-socketio==5.11.3
     pytz==2024.1
-    redis==5.0.7
+    redis==5.0.8
     requests==2.32.3
     rq==1.16.2
     slackclient==2.9.4
@@ -95,15 +95,15 @@ dev =
     wheel
 
 test =
-    fakeredis==2.23.3
+    fakeredis==2.23.4
     mixer==7.2.2
     pytest-cov==5.0.0
     pytest==8.3.2
 
 monitoring =
     prometheus-flask-exporter==0.23.1
     pygelf==0.4.2
-    sentry-sdk==2.11.0
+    sentry-sdk==2.12.0
 
 lint =
     autoflake==2.3.1

zou/app/services/persons_service.py

@@ -276,12 +276,15 @@ def update_password(email, password):
     return person.serialize()
 
 
-def update_person(person_id, data):
+def update_person(person_id, data, bypass_protected_accounts=False):
     """
     Update person entry with data given in parameter.
     """
     person = Person.get(person_id)
-    if person.email in config.PROTECTED_ACCOUNTS:
+    if (
+        not bypass_protected_accounts
+        and person.email in config.PROTECTED_ACCOUNTS
+    ):
         message = None
         if data.get("active") is False:
             message = (

zou/cli.py

@@ -140,7 +140,7 @@ def reset_migrations():
 
 @cli.command()
 @click.argument("email")
-@click.option("--password", required=True)
+@click.option("--password", default=None)
 def create_admin(email, password):
     """
     Create an admin user to allow usage of the API when database is empty.
@@ -149,10 +149,18 @@ def create_admin(email, password):
         try:
             person = persons_service.get_person_by_email(email)
             if person["role"] != "admin":
-                persons_service.update_person(person["id"], {"role": "admin"})
+                persons_service.update_person(
+                    person["id"],
+                    {"role": "admin"},
+                    bypass_protected_accounts=True,
+                )
                 print("Existing user's role has been upgraded to 'admin'.")
         except PersonNotFoundException:
             try:
+                if password is None:
+                    raise click.MissingParameter(
+                        param_type="option", param_hint="--password"
+                    )
                 auth.validate_password(password)
                 # Allow "[email protected]" to be invalid.
                 if email != "[email protected]":