fix new ui member account privilege

app/controllers/admin/users_new_interface_controller.rb

@@ -181,6 +181,16 @@ class Admin::UsersNewInterfaceController <  OrbitMemberController
   def edit_passwd
     # @disable_all_field = false
     @user = User.find(params[:users_new_interface_id])
+    if current_user.id == @user.id
+      redirect_to :action => :index
+    end
+  end
+
+  def edit_privilege
+    @user = User.find(params[:users_new_interface_id])
+    if current_user.id == @user.id
+      redirect_to :action => :index
+    end
   end
   
   def update
@@ -203,6 +213,20 @@ class Admin::UsersNewInterfaceController <  OrbitMemberController
         render :action => :edit_passwd, :notice => flash.now[:error]
       end
 
+    elsif params[:edit_type] == 'edit_privilege'
+
+      @checkuser = User.where(:user_id => params[:user][:user_id]).first
+
+      if @user.admin && current_user.id == @user.id
+        flash.now[:error] = t("users.admin_change_password")
+      end
+
+      if !flash.now[:error] && @user.update_attributes(params[:user])
+        redirect_to :action => :show
+      else
+        render :action => :edit_privilege, :notice => flash.now[:error]
+      end
+
     else
 
       @user.update_attributes(params[:user])