Disallow remote users from viewing local-only toots
This commit is contained in:
parent
9f2945ef80
commit
c4bec9263c
|
@ -12,7 +12,7 @@ class StatusPolicy < ApplicationPolicy
|
|||
end
|
||||
|
||||
def show?
|
||||
return false if local_only? && current_account.nil?
|
||||
return false if local_only? && (current_account.nil? || !current_account.local?)
|
||||
|
||||
if direct?
|
||||
owned? || mention_exists?
|
||||
|
|
Reference in New Issue