mirror/mastodon
1
0
Fork 0
mirror of https://github.com/mastodon/mastodon synced 2025-01-10 20:03:22 +09:00
Code

Add self_editing? method to user role policy (#33476)

Browse Source
This commit is contained in:
Matt Jankowski 2025-01-07 02:50:19 -05:00 committed by GitHub
parent dd937e115a
commit edf62d4fe3
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
app/policies/user_role_policy.rb
View File

@ -10,10 +10,16 @@ class UserRolePolicy < ApplicationPolicy
end end
def update? def update?
role.can?(:manage_roles) && (role.overrides?(record) || role.id == record.id) role.can?(:manage_roles) && (role.overrides?(record) || self_editing?)
end end
def destroy? def destroy?
!record.everyone? && role.can?(:manage_roles) && role.overrides?(record) && role.id != record.id !record.everyone? && role.can?(:manage_roles) && role.overrides?(record) && !self_editing?
end
private
def self_editing?
role.id == record.id
end end
end end