disable edit password

2025-09-06 10:41:51 +03:00
parent 284204fd78
commit 1245ff2cce
2 changed files with 7 additions and 5 deletions
@@ -54,7 +54,7 @@ class UsersController < ApplicationController
      @user.account = account
    end

-    if @user.update(attrs.except(*(current_user == @user ? %i[otp_required_for_login role] : nil)))
+    if @user.update(attrs.except(*(current_user == @user ? %i[password otp_required_for_login role] : %i[password])))
      redirect_back fallback_location: settings_users_path, notice: I18n.t('user_has_been_updated')
    else
      render turbo_stream: turbo_stream.replace(:modal, template: 'users/edit'), status: :unprocessable_content