Add required authorization to all pages

[cs356-p2-videostore.git] / app / models / user.rb

diff --git a/app/models/user.rb b/app/models/user.rb
index 1edfc41..9e50c73 100644 (file)
--- a/app/models/user.rb
+++ b/app/models/user.rb
@@ -36,8 +36,10 @@ class User < ActiveRecord::Base
   end
 
   def after_destroy
-    if User.count.zero?
-      raise "Can't delete last user"
+    # We can't delete all of the managers, nor all of the users
+    managers = User.find_all_by_manager(true)
+    if managers.length.zero? or User.count.zero?
+      raise "Can't delete last manager"
     end
   end