forked from fixin.me/fixin.me
Disallow status change for self
This commit is contained in:
@@ -17,6 +17,7 @@ class UsersController < ApplicationController
|
|||||||
end
|
end
|
||||||
|
|
||||||
def update
|
def update
|
||||||
|
raise ArgumentError if current_user == @user
|
||||||
@user.update!(params.require(:user).permit(:status))
|
@user.update!(params.require(:user).permit(:status))
|
||||||
end
|
end
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user