From f307ff9e687cdc813663cbafcb821f735515388b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?David=20B=C3=B6hm?= Date: Thu, 19 Sep 2024 08:10:25 +0200 Subject: [PATCH] Fixed policy for controller admin/update --- app/controllers/admin/users_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/admin/users_controller.rb b/app/controllers/admin/users_controller.rb index c8e16f8..b724953 100644 --- a/app/controllers/admin/users_controller.rb +++ b/app/controllers/admin/users_controller.rb @@ -24,7 +24,7 @@ class Admin::UsersController < ApplicationController end def update - authorize! @user + authorize! @user, to: :change_role? if @user.update(user_params) respond_to do |format| format.html { redirect_back(fallback_location: admin_users_path) }