OK. So should I leave this as it is, or should I modify the view so that when the user want to remove himself from group, the DELETE gets sent to profile instead of groups? I think this is not very pretty, since we'd have side by side buttons with same style that send requests to different URLs, but beauty is subjective.
If we redirect DELETE to profile, what should we do about the "who can remove whom" logic added under users_group model:
- keep it because it is used on the view, to decide what to show, and on the controller. I prefer this option since it encapsulates logic on the model. Fat models, lean controllers.
- leave it in the controllers, always show the buttons on the view, and open the error popup if someone clicks.