pundit: convert users to pundit.

2020-03-16 00:18:50 -05:00
parent a0c4617057
commit 5c6d26ea24
9 changed files with 88 additions and 59 deletions
--- a/app/controllers/admin/users_controller.rb
+++ b/app/controllers/admin/users_controller.rb
@@ -1,13 +1,11 @@
 module Admin
  class UsersController < ApplicationController
-    before_action :moderator_only
-
    def edit
-      @user = User.find(params[:id])
+      @user = authorize User.find(params[:id]), :promote?
    end

    def update
-      @user = User.find(params[:id])
+      @user = authorize User.find(params[:id]), :promote?
      @user.promote_to!(params[:user][:level], params[:user])
      redirect_to edit_admin_user_path(@user), :notice => "User updated"
    end