[FEATURE] Disallow ignoring self, admins or moderators users (#7202)

This commit is contained in:
Tarek Khalil
2019-03-20 10:18:46 +00:00
committed by Régis Hanol
parent fed2dd9148
commit 3b59ff0d02
10 changed files with 90 additions and 21 deletions

View File

@ -997,10 +997,9 @@ class UsersController < ApplicationController
def ignore
raise Discourse::NotFound unless SiteSetting.ignore_user_enabled
guardian.ensure_can_ignore_user!(params[:ignored_user_id])
::IgnoredUser.find_or_create_by!(
user: current_user,
ignored_user_id: params[:ignored_user_id])
IgnoredUser.find_or_create_by!(user: current_user, ignored_user_id: params[:ignored_user_id])
render json: success_json
end