Unset state from user if no super or user admin

This commit is contained in:
Andy Miller
2018-12-18 20:18:01 -07:00
parent dbafae4c83
commit a7c040942c

View File

@@ -713,6 +713,7 @@ class Admin
// Clean field for users who shouldn't be able to modify these fields
if (!$this->authorize(['admin.user', 'admin.super'])) {
unset($post['access']);
unset($post['state']);
}
return $post;