FIX: restrict updates on confirm_old_email email templates

This commit is contained in:
Arpit Jalan
2018-05-19 11:45:57 +05:30
parent f3385a74cb
commit 9f422c93f6
4 changed files with 93 additions and 2 deletions

View File

@ -23,7 +23,7 @@ class Admin::EmailTemplatesController < Admin::AdminController
"system_messages.unsilenced", "system_messages.user_automatically_silenced",
"system_messages.welcome_invite", "system_messages.welcome_user", "test_mailer",
"user_notifications.account_created", "user_notifications.admin_login",
"user_notifications.confirm_new_email", "user_notifications.confirm_old_email",
"user_notifications.confirm_new_email",
"user_notifications.notify_old_email", "user_notifications.forgot_password",
"user_notifications.set_password", "user_notifications.signup",
"user_notifications.signup_after_approval",

View File

@ -7,6 +7,12 @@ class Admin::SiteTextsController < Admin::AdminController
'login_required.welcome_message']
end
def self.restricted_keys
['user_notifications.confirm_old_email.title',
'user_notifications.confirm_old_email.subject_template',
'user_notifications.confirm_old_email.text_body_template']
end
def index
overridden = params[:overridden] == 'true'
extras = {}
@ -80,7 +86,7 @@ class Admin::SiteTextsController < Admin::AdminController
end
def find_site_text
raise Discourse::NotFound unless I18n.exists?(params[:id])
raise Discourse::NotFound unless I18n.exists?(params[:id]) && !self.class.restricted_keys.include?(params[:id])
record_for(params[:id])
end