[openstreetmap/openstreetmap-website] Granting / revoking roles for own user (#1697)

[Tom Hughes]

They already have to be an administrator to grant or revoke roles - all actions in the `user_roles` controller are subject to the `require_administrator` filter.

I don't see any particular reason to stop an administrator acting on their own account - maybe stop them removing their own administrator role but I don't see any need for anything more than that.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/1697#issuecomment-349778095
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20171206/34f02561/attachment.html>