Skip to content
Snippets Groups Projects
Select Git revision
  • master default protected
  • 12-9-stable
  • 12-7-stable
  • 12-6-stable
  • 12-8-stable
  • github/fork/Kloppi313/patch-1
  • 12-5-stable
  • 12-4-stable
  • github/fork/ramalokesh8477/master
  • 12-1-stable
  • 12-2-stable
  • 12-0-stable
  • 12-3-stable
  • 42-42-stable
  • github/fork/hussamgit398/patch-2
  • 12-3-auto-deploy-20190911
  • 12-3-auto-deploy-20190916
  • 12-3-auto-deploy-20190908
  • 12-3-auto-deploy-20190901
  • 12-3-auto-deploy-20190901-32664
  • v12.10.0.pre
  • v12.9.0
  • v12.9.0-rc42
  • v12.8.7
  • v12.8.6
  • v12.8.5
  • v12.8.4
  • v12.8.3
  • v12.6.8
  • v12.7.7
  • v12.8.2
  • v12.8.1
  • v12.9.0.pre
  • v12.8.0
  • v12.8.0-rc42
  • v12.5.10
  • v12.7.6
  • v12.6.7
  • v12.7.5
  • v12.5.9
40 results

_user.html.haml

  • Timothy Andrew's avatar
    6fdb17cb
    Don't allow deleting a ghost user. · 6fdb17cb
    Timothy Andrew authored
    - Add a `destroy_user` ability. This didn't exist before, and was implicit in
      other abilities (only admins could access the admin area, so only they could
      destroy all users; a user can only access their own account page, and so can
      destroy only themselves).
    
    - Grant this ability to admins, and when the current user is trying to destroy
      themselves. Disallow destroying ghost users in all cases.
    
    - Modify the `Users::DestroyService` to check this ability. Also check it in
      views to decide whether or not to show the "Delete User" button.
    
    - Add a short summary of the Ghost User to the bio.
    Don't allow deleting a ghost user.
    Timothy Andrew authored
    - Add a `destroy_user` ability. This didn't exist before, and was implicit in
      other abilities (only admins could access the admin area, so only they could
      destroy all users; a user can only access their own account page, and so can
      destroy only themselves).
    
    - Grant this ability to admins, and when the current user is trying to destroy
      themselves. Disallow destroying ghost users in all cases.
    
    - Modify the `Users::DestroyService` to check this ability. Also check it in
      views to decide whether or not to show the "Delete User" button.
    
    - Add a short summary of the Ghost User to the bio.