Merge pull request #986 from Retrospring/fix/unprivileged-comment-actions

Fix unprivileged comment actions being visible
This commit is contained in:
Karina Kwiatek 2023-01-23 09:37:14 +01:00 committed by GitHub
commit 813999f215
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions

View File

@ -6,11 +6,11 @@
%a.dropdown-item.text-danger{ href: "#", data: { action: "ab-comment-destroy", c_id: comment.id } } %a.dropdown-item.text-danger{ href: "#", data: { action: "ab-comment-destroy", c_id: comment.id } }
%i.fa.fa-fw.fa-trash-o %i.fa.fa-fw.fa-trash-o
= t("voc.delete") = t("voc.delete")
- unless comment.user == current_user - if user_signed_in? && comment.user != current_user
%a.dropdown-item{ href: "#", data: { action: "ab-comment-report", c_id: comment.id } } %a.dropdown-item{ href: "#", data: { action: "ab-comment-report", c_id: comment.id } }
%i.fa.fa-fw.fa-exclamation-triangle %i.fa.fa-fw.fa-exclamation-triangle
= t("voc.report") = t("voc.report")
- if current_user.admin? - if user_signed_in? && current_user&.admin?
%a.dropdown-item{ href: rails_admin_path_for_resource(comment), target: "_blank" } %a.dropdown-item{ href: rails_admin_path_for_resource(comment), target: "_blank" }
%i.fa.fa-fw.fa-gears %i.fa.fa-fw.fa-gears
= t("voc.view_in_rails_admin") = t("voc.view_in_rails_admin")