namekuji/chuckya
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add missing authorization to ReactService

Browse source
This commit is contained in:
Jeremy Kescher 2023-05-07 22:05:44 +02:00 committed by neatchee
parent fa0a5a70c7
commit b0b593d525
2 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
app/policies/status_policy.rb
View file

@ -28,6 +28,10 @@ class StatusPolicy < ApplicationPolicy
show? && !blocking_author? show? && !blocking_author?
end end
def react?
show? && !blocking_author?
end
def destroy? def destroy?
owned? owned?
end end

2
app/services/react_service.rb
View file

@ -5,6 +5,8 @@ class ReactService < BaseService
include Payloadable include Payloadable
def call(account, status, emoji) def call(account, status, emoji)
authorize_with account, status, :react?
name, domain = emoji.split('@') name, domain = emoji.split('@')
custom_emoji = CustomEmoji.find_by(shortcode: name, domain: domain) custom_emoji = CustomEmoji.find_by(shortcode: name, domain: domain)
reaction = StatusReaction.find_by(account: account, status: status, name: name, custom_emoji: custom_emoji) reaction = StatusReaction.find_by(account: account, status: status, name: name, custom_emoji: custom_emoji)