evazion 9f09c495e4 users: don't allow admins to edit user levels directly. ...

Don't allow admins to bypass promotion restrictions by manually updating
user levels with a `PUT /users/:id` API call. Level changes have to go
through the /admin/users/:id/edit page.

2020-12-13 21:21:08 -06:00

13 KiB

Raw Blame History

View Raw