fix #5441

2026-04-26 14:14:30 +02:00
parent 34374cbe09
commit 1ad78af5a0
1 changed files with 7 additions and 1 deletions
@@ -87,7 +87,13 @@ const internalUser = {
 		}

 		return access
-			.can("users:update", data.id)
+			.can("users:permissions", data.id)
+			.catch(() => {
+				delete data.roles;
+			})
+			.then(() => {
+				return access.can("users:update", data.id);
+			})
 			.then(() => {
 				// Make sure that the user being updated doesn't change their email to another user that is already using it
 				// 1. get user we want to update