MAGETWO-55849: Customer can be deleted without Merchant permissions verification

Author: RuslanKostiv1

app/code/Magento/User/view/adminhtml/web/js/delete-user-account.js

@@ -1,16 +1,23 @@
+/**
+ * Copyright © 2016 Magento. All rights reserved.
+ * See COPYING.txt for license details.
+ */
 define([
     "jquery"
 ], function($){
+    'use strict';
 
     return function (params, elem) {
 
         elem.on('click', function() {
             if ($.validator.validateElement($('[name="current_password"]'))) {
-                postData = {'data' : {
-                    'user_id': params.objId,
-                    'current_password': $('[name="current_password"]').val()
-                }}
-                deleteConfirm(params.message, params.url, params.postData);
+                var postData = {
+                    'data' : {
+                        'user_id': params.objId,
+                        'current_password': $('[name="current_password"]').val()
+                    }
+                }
+                deleteConfirm(params.message, params.url, postData);
             }
         });
     }