PonyMirrors/philomena
1
0
Fork 0
mirror of https://github.com/philomena-dev/philomena.git synced 2024-11-27 13:47:58 +01:00
Code Issues Projects Releases Packages Wiki Activity

require tampering permission to see votes

Browse source
This commit is contained in:
byte[] 2020-09-08 19:03:18 -04:00
parent 4e227f1252
commit 389100dae2
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/philomena_web/controllers/image/favorite_controller.ex
View file

@ -17,7 +17,7 @@ defmodule PhilomenaWeb.Image.FavoriteController do
end
defp load_votes_if_authorized(conn, _opts) do
case Canada.Can.can?(conn.assigns.current_user, :hide, conn.assigns.image) do
case Canada.Can.can?(conn.assigns.current_user, :tamper, conn.assigns.image) do
true ->
image = Repo.preload(conn.assigns.image, upvotes: :user, downvotes: :user, hides: :user)

2
lib/philomena_web/controllers/image/tamper_controller.ex
View file

@ -8,7 +8,7 @@ defmodule PhilomenaWeb.Image.TamperController do
alias Philomena.ImageVotes
alias Philomena.Repo
plug PhilomenaWeb.CanaryMapPlug, create: :hide
plug PhilomenaWeb.CanaryMapPlug, create: :tamper
plug :load_and_authorize_resource, model: Image, id_name: "image_id", persisted: true
plug :load_resource, model: User, id_name: "user_id", persisted: true