Don't allow auto-updating of trust level

assets/javascripts/discourse/components/wizard-mapper-selector.js.es6

@@ -84,13 +84,14 @@ export default Component.extend({
       content = content.filter(field => field.id !== controller.currentField.id);
     }
     
-    // updating usernames or emails via actions is not supported
+    // updating certain user fields via the profile update action is not supported
     if (activeType === 'userField' &&
         this.options.context === 'action' &&
         this.inputType === 'association' &&
         this.selectorType === 'key') {
       
-      content = content.filter(userField => ['username','email'].indexOf(userField.id) === -1);  
+      const excludedFields = ['username','email', 'trust_level'];
+      content = content.filter(userField => excludedFields.indexOf(userField.id) === -1);  
     }
     
     return content;

lib/custom_wizard/actions.rb

@@ -275,7 +275,7 @@ class CustomWizard::Action
   end
   
   def profile_excluded_fields
-    ['username', 'email'].freeze
+    ['username', 'email', 'trust_level'].freeze
   end
   
   def allowed_profile_fields