Admin attribute should be updatable by admins

mendicant-original · May 3, 2011 · aa3b7d0 · aa3b7d0
1 parent af963ca
commit aa3b7d0
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/app/controllers/admin/users_controller.rb b/app/controllers/admin/users_controller.rb
@@ -1,5 +1,6 @@
 class Admin::UsersController < Admin::Base
   before_filter :find_user, :only => [:edit, :update]
+  before_filter :update_protected_attrs, :only => [:update]
 
   def index
     order_by = []
@@ -36,4 +37,10 @@ def find_user
     @user = User.find(params[:id])
   end
 
+  def update_protected_attrs
+    admin = params[:user].delete(:admin)
+
+    @user.update_attribute(:admin, admin)
+  end
+
 end