class Admin::UserPolicy < ApplicationPolicy skip_pre_check :allow_admins, only: :change_role? def change_role? user.admin? and user != record end end