github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-06-04 23:24:41 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

FIX: users can see the raw email source of their own posts

Browse Source
This commit is contained in:
Régis Hanol
2014-11-12 14:49:42 +01:00
parent fe541891fc
commit a036ac7bdc
3 changed files with 5 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
lib/guardian/post_guardian.rb
View File

@ -180,8 +180,8 @@ module PostGuardian
is_staff?
end
def can_view_raw_email?
is_staff?
def can_view_raw_email?(post)
post && (is_staff? || post.user_id == @user.id)
end
def can_unhide?(post)