El Dorado

It woudl be great if we could add deletion of accounts to teh list of things that only admins can do. is that possible? is there a file edit somewhere that can be applied for this? T H A N K S

That's already in place. If you're an admin, you can click to a user account page, then click edit profile, then delete. Users can also delete themselves. You'll see a message and confirmation screen that explains the details of deleting a user.

Actually, what if you do NOT want users to delete themselves? In other words, take that privilege away from users so that ONLY admins can do that?

test

test2

You might have to change the way the users controller works. You could try to make the users controller an "admin only" setting, in the admin settings, but then users wouldn't be able to do anything with their accounts.

as posted in another thread:

nekote2 wrote:

Modifying El Dorado so only admins can delete a user.
That's a piece of cake.
\el-dorado\app\views\users\edit.html.erb
#
# <%= link_to 'Delete', confirm_delete_user_path %> &nbsp;
#
# Allow *only* admins to delete any user, except themselves
#
<% if admin? %>
<%= link_to 'Delete', confirm_delete_user_path %> &nbsp;
<% end %>
#


I'd like to add a bell and whistle.

I would like to prevent an admin from deleting themselves.
(Yes, I know, they can easily create such a shell admin account)
(Looking to make that one notch of delay / extra effort / consideration / reflection)
Unfortunately, I haven't figured out the finer points of @user versus user.
What I need is an improved "<% if admin? %>"
Maybe something like "<% if admin? and @user.id != user.id %>"
But, that causes an error.

Trevor wrote:

I think the short answer is that you could restrict the admin from
deleting himself in the controller or model layer. So, in the destroy
action in the controller, you could flash a message if @user.admin? -
or something similar in the model.

Haven't gotten into the controller nor flashing, yet.
Hope to avoid that.

How can I test if the user to be deleted is the same as the (admin) user requesting the delete?