github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-05-22 07:53:49 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

FIX: don't let blocked users reach post creator or new post queue

Browse Source 
correct broken spec
This commit is contained in:
Sam
2015-08-06 10:32:53 +10:00
parent 11d39345b3
commit bafdf9290d
2 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
app/controllers/posts_controller.rb
View File

@ -88,6 +88,15 @@ class PostsController < ApplicationController
end end
def create def create
if !is_api? && current_user.blocked?
# error has parity with what user would get if they posted when blocked
# and it went through post creator
render json: {errors: [I18n.t("topic_not_found")]}, status: 422
return
end
@manager_params = create_params @manager_params = create_params
@manager_params[:first_post_checks] = !is_api? @manager_params[:first_post_checks] = !is_api?

2
spec/controllers/posts_controller_spec.rb
View File

@ -484,6 +484,8 @@ describe PostsController do
it 'queues the post if min_first_post_typing_time is not met' do it 'queues the post if min_first_post_typing_time is not met' do
SiteSetting.min_first_post_typing_time = 3000 SiteSetting.min_first_post_typing_time = 3000
# our logged on user here is tl1
SiteSetting.auto_block_fast_typers_max_trust_level = 1
xhr :post, :create, {raw: 'this is the test content', title: 'this is the test title for the topic'} xhr :post, :create, {raw: 'this is the test content', title: 'this is the test title for the topic'}