FIX: restrict updates on confirm_old_email email templates

This commit is contained in:
Arpit Jalan
2018-05-19 11:45:57 +05:30
parent f3385a74cb
commit 9f422c93f6
4 changed files with 93 additions and 2 deletions

View File

@ -7,6 +7,12 @@ class Admin::SiteTextsController < Admin::AdminController
'login_required.welcome_message']
end
def self.restricted_keys
['user_notifications.confirm_old_email.title',
'user_notifications.confirm_old_email.subject_template',
'user_notifications.confirm_old_email.text_body_template']
end
def index
overridden = params[:overridden] == 'true'
extras = {}
@ -80,7 +86,7 @@ class Admin::SiteTextsController < Admin::AdminController
end
def find_site_text
raise Discourse::NotFound unless I18n.exists?(params[:id])
raise Discourse::NotFound unless I18n.exists?(params[:id]) && !self.class.restricted_keys.include?(params[:id])
record_for(params[:id])
end