mirror of
https://github.com/discourse/discourse.git
synced 2025-04-16 16:59:04 +08:00
651b50b1a1
* When an error is raised when checking route constraints, we can only return true/false which either lets the request through or return a 404 error. Therefore, we just skip rate limiting here and let the controller handle the rate limiting.
22 lines
470 B
Ruby
22 lines
470 B
Ruby
require_dependency 'current_user'
|
|
|
|
class StaffConstraint
|
|
|
|
def matches?(request)
|
|
provider = Discourse.current_user_provider.new(request.env, rate_limit: false)
|
|
|
|
provider.current_user &&
|
|
provider.current_user.staff? &&
|
|
custom_staff_check(request)
|
|
rescue Discourse::InvalidAccess
|
|
false
|
|
end
|
|
|
|
# Extensibility point: plugins can overwrite this to add additional checks
|
|
# if they require.
|
|
def custom_staff_check(request)
|
|
true
|
|
end
|
|
|
|
end
|