个人主页：用户不应有修改他人头像的权限

app/views/layouts/new_base_user.html.erb

@@ -102,8 +102,10 @@
   <div class="homepageContent">
     <div class="homepageLeft mt10" id="LSide">
       <div class="user_leftinfo mb10">
-        <% if User.current.logged?%>
+        <% if User.current.logged? && User.current == @user%>
             <%=link_to image_tag(url_to_avatar(@user),width:"74", height: "74", :id=>'nh_user_tx'), my_clear_user_avatar_temp_path, :class => "user_leftinfo_img", :remote => true%>
+        <% elsif User.current.logged? %>
+            <a href="javascript:void(0)" style="cursor: default;" class="user_leftinfo_img"><%=image_tag(url_to_avatar(@user),width:"74", height: "74", :id=>'nh_user_tx') %></a>
         <% else %>
             <img src="images/user/male.jpg" width="74" height="74" />
         <% end %>