From b8919161a8979f239b44cffb3d6451fecaf267b3 Mon Sep 17 00:00:00 2001
From: Michael Halliday <michael@eadiefleet.com>
Date: Wed, 3 Dec 2025 09:56:15 -0500
Subject: [PATCH] Allow non-admins to update their room involvements

---
 app/controllers/rooms/involvements_controller.rb       | 2 --
 test/controllers/rooms/involvements_controller_test.rb | 9 +++++++++
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/app/controllers/rooms/involvements_controller.rb b/app/controllers/rooms/involvements_controller.rb
index 0c5c1e6..7f2878b 100644
--- a/app/controllers/rooms/involvements_controller.rb
+++ b/app/controllers/rooms/involvements_controller.rb
@@ -1,8 +1,6 @@
 class Rooms::InvolvementsController < ApplicationController
   include RoomScoped
 
-  before_action :ensure_can_administer, only: %i[ update ]
-
   def show
     @involvement = @membership.involvement
   end
diff --git a/test/controllers/rooms/involvements_controller_test.rb b/test/controllers/rooms/involvements_controller_test.rb
index 23743a0..d535e97 100644
--- a/test/controllers/rooms/involvements_controller_test.rb
+++ b/test/controllers/rooms/involvements_controller_test.rb
@@ -43,4 +43,13 @@ class Rooms::InvolvementsControllerTest < ActionDispatch::IntegrationTest
     end
     end
   end
+
+  test "a non-admin can update their room involvement" do
+    sign_in :jz
+
+    assert_changes -> { memberships(:jz_designers).reload.involvement }, from: "everything", to: "mentions" do
+      put room_involvement_url(rooms(:designers)), params: { involvement: "mentions" }
+      assert_redirected_to room_involvement_url(rooms(:designers))
+    end
+  end
 end