Only let admins edit users

reload · Sep 25, 2024 · c55d43b · c55d43b
1 parent a273898
commit c55d43b
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -14,6 +14,7 @@ and this project adheres to [Intended Effort Versioning](https://jacobtomlinson.
 ### Changed
 - Invalid token creds results in 403 response, not an anonymous
  response.
+- Only admins can see the user list.
 
 ## [1.3.1] - 2024-09-25
 

diff --git a/src/views/layouts/_nav.ecr b/src/views/layouts/_nav.ecr
@@ -1,2 +1,4 @@
 <li><a href="/" class="nav-link">Home</a></li>
+<% if context.current_user.try &.is_admin %>
 <li><a href="/user" class="nav-link">Users</a></li>
+<% end %>