Unfloyded/Legamunt
0
0
Fork 0
Code Activity

Fix using wrong policy on status-related actions in admin UI (#19490)

Browse source
This commit is contained in:
Eugen Rochko 2022-10-28 00:48:30 +02:00 • committed by GitHub
parent 8ae0936ddd
commit 07cc201acc
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
app/models/trends/status_batch.rb
View file

@ -30,7 +30,7 @@ class Trends::StatusBatch
end
def approve!
statuses.each { |status| authorize(status, :review?) }
statuses.each { |status| authorize([:admin, status], :review?) }
statuses.update_all(trendable: true)
end
@ -45,7 +45,7 @@ class Trends::StatusBatch
end
def reject!
statuses.each { |status| authorize(status, :review?) }
statuses.each { |status| authorize([:admin, status], :review?) }
statuses.update_all(trendable: false)
end