FIX: hide emails on admin user list for moderators (#6781)

This commit is contained in:
Maja Komel
2018-12-19 10:24:57 +01:00
committed by Régis Hanol
parent 2fcbbead45
commit 0ce5f05b2a
4 changed files with 27 additions and 5 deletions

View File

@ -38,8 +38,8 @@ class AdminUserListSerializer < BasicUserSerializer
def include_email?
# staff members can always see their email
(scope.is_staff? && object.id == scope.user.id) || scope.can_see_emails? ||
(scope.is_staff? && object.staged?)
(scope.is_staff? && (object.id == scope.user.id || object.staged?)) ||
(scope.is_admin? && scope.can_see_emails?)
end
alias_method :include_secondary_emails?, :include_email?