Added privilege check for seeing flagger usernames

Also reworked all places dealing with flagger names to use said privilege
2017-06-14 20:43:25 +05:00
parent 5d4592e0e0
commit 1375cc5307
8 changed files with 42 additions and 16 deletions
--- a/app/helpers/post_flags_helper.rb
+++ b/app/helpers/post_flags_helper.rb
@@ -7,8 +7,11 @@ module PostFlagsHelper
      html << '<li>'
      html << DText.parse_inline(flag.reason).html_safe

-      if CurrentUser.is_moderator?
-        html << " - #{link_to_user(flag.creator)} (#{link_to_ip(flag.creator_ip_addr)})"
+      if CurrentUser.can_view_flagger?(flag.creator_id)
+        html << " - #{link_to_user(flag.creator)}"
+        if CurrentUser.is_moderator?
+           html << " (#{link_to_ip(flag.creator_ip_addr)})"
+        end
      end

      html << ' - ' + time_ago_in_words_tagged(flag.created_at)