From cf698e1e8763db04d4932b643bdd78e53e5a25e0 Mon Sep 17 00:00:00 2001
From: Vadym Samoilenko <vadymsamoilenko@oliver.agency>
Date: Fri, 20 Mar 2026 13:34:26 +0000
Subject: [PATCH] Remove create_default_user call from run.py (method removed
 in security remediation)

---
 backend/run.py | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/backend/run.py b/backend/run.py
index da52232d..1e2c9b3c 100755
--- a/backend/run.py
+++ b/backend/run.py
@@ -47,8 +47,7 @@ quart_app = asgi_app.quart_app
 
 # Initialize database on startup
 async def initialize_database():
-    # Create default user if it doesn't exist
-    await User.create_default_user()
+    pass  # Default user creation removed (security: use populate_db.py script instead)
 
 # Use the ASGI app for the server
 app = asgi_app