Unfloyded/Legamunt
0
0
Fork 0
Code Activity

Extract authorization policy for viewing statuses (#3150)

Browse source
This commit is contained in:
Jack Jennings 2017-05-29 09:22:22 -07:00 • committed by Eugen Rochko
parent 9a81be0d37
commit 3a2003ba86
16 changed files with 155 additions and 80 deletions
Download patch file Download diff file Expand all files Collapse all files

4
app/services/favourite_service.rb
View file

@ -1,12 +1,14 @@
# frozen_string_literal: true
class FavouriteService < BaseService
include Authorization
# Favourite a status and notify remote user
# @param [Account] account
# @param [Status] status
# @return [Favourite]
def call(account, status)
raise Mastodon::NotPermittedError unless status.permitted?(account)
authorize_with account, status, :show?
favourite = Favourite.create!(account: account, status: status)