Fix: authorization issue (#3530)

### What problem does this PR solve?


### Type of change

- [x] Bug Fix (non-breaking change which fixes an issue)

api/apps/tenant_app.py

 @manager.route('/<tenant_id>/user/<user_id>', methods=['DELETE'])
 @login_required
 def rm(tenant_id, user_id):
-    if current_user.id != tenant_id:
+    if current_user.id != tenant_id and current_user.id != user_id:
         return get_json_result(
             data=False,
             message='No authorization.',