Unallowed API to update role

lib/diskuy_web/controllers/user_controller.ex

@@ -36,7 +36,7 @@ defmodule DiskuyWeb.UserController do
 
   def update(conn, %{"user" => user_params}) do
     user = Guardian.Plug.current_resource(conn)
-    new_user_params = user_params |> Map.drop(["email", "id"])
+    new_user_params = user_params |> Map.drop(["email", "id", "role"])
     with {:ok, %User{} = user} <- Account.update_user(user, new_user_params) do
       render(conn, "show.json", user: user)
     end