[openstreetmap/openstreetmap-website] Granting / revoking roles for own user (#1697)

Tom Hughes notifications at github.com
Wed Dec 6 21:19:46 UTC 2017

They already have to be an administrator to grant or revoke roles - all actions in the `user_roles` controller are subject to the `require_administrator` filter.

I don't see any particular reason to stop an administrator acting on their own account - maybe stop them removing their own administrator role but I don't see any need for anything more than that.

You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20171206/34f02561/attachment.html>

More information about the rails-dev mailing list