Unset state from user if no super or user admin

This commit is contained in:
Andy Miller
2018-12-18 20:18:01 -07:00
parent 8b28815297
commit 3feadb7bd9

View File

@@ -702,6 +702,7 @@ class Admin
// Clean field for users who shouldn't be able to modify these fields
if (!$this->authorize(['admin.user', 'admin.super'])) {
unset($post['access']);
unset($post['state']);
}
return $post;