admins can change external users's names

alihadimazeh · Nov 14, 2024 · bf02581 · bf02581
1 parent eb78da7
commit bf02581
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 5 deletions.
diff --git a/app/controllers/api/v1/users_controller.rb b/app/controllers/api/v1/users_controller.rb
@@ -169,7 +169,9 @@ def create_user_params
       end
 
       def update_user_params
-        @update_user_params ||= if external_auth?
+        @update_user_params ||= if external_auth? && current_user.role.name.eql?('Administrator')
+                                  params.require(:user).permit(:name)
+                                elsif external_auth?
                                   params.require(:user).permit(:password, :avatar, :language, :role_id, :invite_token)
                                 else
                                   params.require(:user).permit(:name, :password, :avatar, :language, :role_id, :invite_token)

diff --git a/db/schema.rb b/db/schema.rb