diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb index 6f5de27..52ec3c4 100644 --- a/app/controllers/users_controller.rb +++ b/app/controllers/users_controller.rb @@ -39,13 +39,9 @@ class UsersController < ApplicationController # PATCH/PUT /users/1 or /users/1.json def update - if not @user == current_user - redirect_to user_path(@user), notice: "User not authorized to edit this user" - return - end respond_to do |format| - if @user.update(user_params) + if user_params[:username].nil? && @user == current_user && @user.update(user_params) format.html { redirect_to user_url(@user), notice: "User was successfully updated." } format.json { render :show, status: :ok, location: @user } else diff --git a/app/views/users/_form.html.erb b/app/views/users/_form.html.erb index 59f5f79..99c1958 100644 --- a/app/views/users/_form.html.erb +++ b/app/views/users/_form.html.erb @@ -13,10 +13,12 @@ <% end %> -