FreakU
/
mastodon
Archived
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Add missing authorization to ReactService

This commit is contained in:
Jeremy Kescher 2023-05-07 22:05:44 +02:00
parent c47aa90717
commit 6e0d17cc7d
No known key found for this signature in database
GPG Key ID: 80A419A7A613DFA4
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
app/policies/status_policy.rb
View File

@ -28,6 +28,10 @@ class StatusPolicy < ApplicationPolicy
show? && !blocking_author? show? && !blocking_author?
end end
def react?
show? && !blocking_author?
end
def destroy? def destroy?
owned? owned?
end end

2
app/services/react_service.rb
View File

@ -5,6 +5,8 @@ class ReactService < BaseService
include Payloadable include Payloadable
def call(account, status, emoji) def call(account, status, emoji)
authorize_with account, status, :react?
name, domain = emoji.split('@') name, domain = emoji.split('@')
custom_emoji = CustomEmoji.find_by(shortcode: name, domain: domain) custom_emoji = CustomEmoji.find_by(shortcode: name, domain: domain)
reaction = StatusReaction.find_by(account: account, status: status, name: name, custom_emoji: custom_emoji) reaction = StatusReaction.find_by(account: account, status: status, name: name, custom_emoji: custom_emoji)