namekuji/chuckya
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Extend AUTHORIZED_FETCH mode to user blocks as well (#11332)

Browse source 
* Extend AUTHORIZED_FETCH mode to user blocks as well

* Move decision to deny access to StatusPolicy
This commit is contained in:
ThibG 2019-07-17 01:53:37 +02:00 committed by Eugen Rochko
parent 15ddabf95a
commit 5599caef49
1 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
app/policies/status_policy.rb
View file

@ -17,7 +17,7 @@ class StatusPolicy < ApplicationPolicy
elsif private? elsif private?
owned? || following_author? || mention_exists? owned? || following_author? || mention_exists?
else else
current_account.nil? || !author_blocking? current_account.nil? || (!author_blocking? && !author_blocking_domain?)
end end
end end
@ -63,6 +63,12 @@ class StatusPolicy < ApplicationPolicy
end end
end end
def author_blocking_domain?
return false if current_account.nil? || current_account.domain.nil?
author.blocking_domain?(current_account.domain)
end
def blocking_author? def blocking_author?
return false if current_account.nil? return false if current_account.nil?