Prevent class from being changed via PUT /user

2015-10-26 17:25:51 -05:00
parent c7b162271c
commit 13bca6b9a9
2 changed files with 22 additions and 4 deletions
@@ -298,10 +298,9 @@ acceptablePUTPaths = _.reduce(require('./../models/user').schema.paths, function
  return m;
 }, {})

-//// Uncomment this if we we want to disable GP-restoring (eg, holiday events)
-//_.each('stats.gp'.split(' '), function(removePath){
-//  delete acceptablePUTPaths[removePath];
-//})
+_.each('stats.class'.split(' '), function(removePath){
+ delete acceptablePUTPaths[removePath];
+})

 /**
 * Update user