Add role 'owner' to users (#185)

app/controllers/site_settings_controller.rb

@@ -4,7 +4,7 @@ class SiteSettingsController < ApplicationController
   before_action :authenticate_admin,
     only: [:general, :boards, :post_statuses, :roadmap, :authentication]
 
-  before_action :authenticate_power_user,
+  before_action :authenticate_moderator,
     only: [:users]
   
   def general

app/controllers/users_controller.rb

@@ -17,6 +17,9 @@ class UsersController < ApplicationController
 
     @user.assign_attributes user_update_params
 
+    # Handle special case: trying to set user role to 'owner'
+    raise Pundit::NotAuthorizedError if @user.owner?
+
     if @user.save
       render json: @user
     else