votes: allow Members to vote.

* Allow Member-level users to vote. * Don't allow Banned or Restricted users to create favorites any more. Banned and Restricted users aren't allowed to upvote or favorite any more to prevent sockpuppet accounts from upvoting even after they're banned.
2021-11-16 05:11:04 -06:00
parent 1a27b1d5eb
commit 055e5939b4
5 changed files with 24 additions and 7 deletions
--- a/app/policies/favorite_policy.rb
+++ b/app/policies/favorite_policy.rb
@@ -1,6 +1,6 @@
 class FavoritePolicy < ApplicationPolicy
  def create?
-    !user.is_anonymous?
+    unbanned? && user.is_member?
  end

  def destroy?
--- a/app/policies/post_vote_policy.rb
+++ b/app/policies/post_vote_policy.rb
@@ -1,6 +1,6 @@
 class PostVotePolicy < ApplicationPolicy
  def create?
-    unbanned? && user.is_gold?
+    unbanned? && user.is_member?
  end

  def destroy?