request->isLvTenant) { $allowedFields[] = 'local_group'; if (!$this->request->isOwnUser) { $allowedFields[] = 'user_role_main'; } } $data = array_intersect_key($this->request->data, array_flip($allowedFields)); $this->request->user->update($data); $response->success = true; $response->message = 'Benutzerdaten wurden gespeichert.'; return $response; } }