Only root users can delete users

[r-ferrier]

Description

Only root users should be able to delete users.

Acceptance criteria

• [x] A root user can delete any user
• [x] A neighbourhood admin cannot delete any users
• [x] A partnership admin cannot delete any users
• [x] A citizen, editor or site_admin cannot delete any users

Plan

• Investigate code & UI and find out if anyone else currently can delete users
• If they can, add in checks to user policy to only permit root to delete users
• If they can see any, remove links to delete options from views accessible by other users

[r-ferrier]

This all looks good! Delete button is only shown to users with permission to delete users. Only root admins have permission to delete users.

[r-ferrier]

Verified:

NA cannot see delete button:

PA & citizen cannot see other users:

Root can see everyone and delete everyone, including other roots: