From 2875f1de7b96b1d3c33649c93c6a831d87a642b9 Mon Sep 17 00:00:00 2001 From: nasia Date: Tue, 30 May 2017 22:06:59 +0300 Subject: [PATCH] Organiser cannot remove admins #1459 --- app/models/ability.rb | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/app/models/ability.rb b/app/models/ability.rb index ff1628a1..3fed455e 100644 --- a/app/models/ability.rb +++ b/app/models/ability.rb @@ -189,6 +189,10 @@ class Ability can [:index, :revert_object, :revert_attribute], PaperTrail::Version do |version| version.item_type == 'User' || (conf_ids_for_organizer.include? version.conference_id) end + + cannot [:revert_object, :revert_attribute], PaperTrail::Version do |version| + version.item_type == 'User' && version.item.is_admin? + end end def signed_in_with_cfp_role(user)