Users with the viewer role can delete admin and other users account. It this leads to denial of service and affects data integrity.

Endpoint DELETE /api/users/admin is enable to anonymous user.

I deleted admin user on demo.frigate.video:

It this leads to denial of service and affects data integrity.

Restrict access to the endpoint to authenticated admin users only: Add dependencies=[Depends(require role(["admin"]))]) to this endpoint.