Allow mods to disable login, improve message when login disabled (#8329)

* Allow moderators to disable/enable login * Instead of rejecting login, show forbidden error when login disabled Avoid confusion because when login is rejected, the message is that the account is not activated, which is wrong. * Fix tests
2018-08-23 23:26:29 +02:00
parent 9d58daac6c
commit 2f34b747b3
6 changed files with 9 additions and 11 deletions
--- a/app/policies/user_policy.rb
+++ b/app/policies/user_policy.rb
@ -18,11 +18,11 @@ class UserPolicy < ApplicationPolicy
  end

  def enable?
-    admin?
+    staff?
  end

  def disable?
-    admin? && !record.admin?
+    staff? && !record.admin?
  end

  def promote?