- Last-admin only when target role is non-admin (admins may switch admin roles). - Use Ash.Changeset.get_attribute for new role_id. Tests: admin role switch, non-admin update_user role_id forbidden. |
||
|---|---|---|
| .. | ||
| user_policies_test.exs | ||
- Last-admin only when target role is non-admin (admins may switch admin roles). - Use Ash.Changeset.get_attribute for new role_id. Tests: admin role switch, non-admin update_user role_id forbidden. |
||
|---|---|---|
| .. | ||
| user_policies_test.exs | ||