From 6ffd0a479c667ff91ea595a3cd70d76006f5201d Mon Sep 17 00:00:00 2001
From: davidg73 <david.gunnarsson@univie.ac.at>
Date: Thu, 17 Apr 2025 13:16:14 +0200
Subject: [PATCH] Temporarily disable user updates

just so in the first test phase users dont lock one another out
---
 app/policies/user_policy.rb                    |  2 +-
 app/views/avo/partials/_sidebar_extra.html.erb | 10 ++++++----
 2 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/app/policies/user_policy.rb b/app/policies/user_policy.rb
index c94a5ea..803ed2e 100644
--- a/app/policies/user_policy.rb
+++ b/app/policies/user_policy.rb
@@ -14,7 +14,7 @@ class UserPolicy < ApplicationPolicy
   end
 
   def update?
-    user? && user.admin?
+    false
   end
 
   def destroy?
diff --git a/app/views/avo/partials/_sidebar_extra.html.erb b/app/views/avo/partials/_sidebar_extra.html.erb
index ead555f..3dc641b 100644
--- a/app/views/avo/partials/_sidebar_extra.html.erb
+++ b/app/views/avo/partials/_sidebar_extra.html.erb
@@ -2,8 +2,10 @@
 </div>
 
 <div class="space-y-1 mb-4">
-  <%= render Avo::Sidebar::HeadingComponent.new label: "Your Account" %>
-  <div class="w-full space-y-1">
-    <%= render Avo::Sidebar::LinkComponent.new label: "Change Password", path: avo.settings_password_path %>
-  </div>
+  <% if false # temporarily hide password update so test users dont lock out one another %>
+    <%= render Avo::Sidebar::HeadingComponent.new label: "Your Account" %>
+    <div class="w-full space-y-1">
+      <%= render Avo::Sidebar::LinkComponent.new label: "Change Password", path: avo.settings_password_path %>
+    </div>
+  <% end %>
 </div>
-- 
GitLab