Extend user account deletion to users without security token

apps/api/src/app/user/user.controller.ts

@@ -75,7 +75,6 @@ export class UserController {
   public async deleteOwnUser(
     @Body() data: DeleteOwnUserDto
   ): Promise<UserModel> {
-    // Only users of the anonymous provider have a security token
     const user =
       this.request.user.provider === 'ANONYMOUS'
         ? await this.validateAccessToken(data.accessToken, this.request.user.id)

apps/api/src/app/user/user.service.ts

@@ -439,9 +439,8 @@ export class UserService {
           currentPermissions.push(permissions.enableSubscriptionInterstitial);
         }
 
-        // Users without a security token (e.g. Google) can close their user
-        // account themselves only within a period after the registration
         if (
+          !hasRole(user, Role.DEMO) &&
           user.provider !== 'ANONYMOUS' &&
           isBefore(
             new Date(),

apps/client/src/app/components/user-account-settings/user-account-settings.component.ts

@@ -277,14 +277,20 @@ export class GfUserAccountSettingsComponent implements OnInit {
     this.notificationService.confirm({
       confirmFn: () => {
         this.dataService
-          .deleteOwnUser({
+          .deleteOwnUser(
+            this.hasPermissionToUpdateOwnAccessToken
+              ? {
                   accessToken: this.deleteOwnUserForm.controls.accessToken.value
-          })
+                }
+              : {}
+          )
           .pipe(
             catchError(() => {
+              if (this.hasPermissionToUpdateOwnAccessToken) {
                 this.notificationService.alert({
                   title: $localize`Oops! Incorrect Security Token.`
                 });
+              }
 
               return EMPTY;
             }),

apps/client/src/app/components/user-account-settings/user-account-settings.html

@@ -366,7 +366,7 @@
                   Close Account
                 </button>
               </form>
-            } @else if (hasPermissionToDeleteOwnUser) {
+            } @else if (hasPermissionToDeleteOwnUser && !hasImpersonationId) {
               <button
                 color="warn"
                 i18n