fix: prevent delete also, for users with prevent edit flag

tests/views/test_users.py

@@ -63,6 +63,26 @@ class TestUserView(WebTestCase):
         self.request.is_root = True
         self.assertTrue(view.is_editable(user))
 
+    def test_is_deletable(self):
+        model = self.app.model
+        view = self.make_view()
+
+        # active user is deletable
+        user = model.User(username="barney", active=True)
+        self.assertTrue(view.is_deletable(user))
+
+        # inactive also deletable
+        user = model.User(username="barney", active=False)
+        self.assertTrue(view.is_deletable(user))
+
+        # but not if prevent_edit flag is set
+        user = model.User(username="barney", prevent_edit=True)
+        self.assertFalse(view.is_deletable(user))
+
+        # unless request user is root
+        with patch.object(self.request, "is_root", new=True):
+            self.assertTrue(view.is_deletable(user))
+
     def test_configure_form(self):
         model = self.app.model
         person = model.Person(