api: remove available_includes dependent on current user.
This is to avoid specifying permissions in multiple disjoint places and because most API users shouldn't need these fields.
This commit is contained in:
@@ -225,8 +225,6 @@ class ForumPost < ApplicationRecord
|
||||
end
|
||||
|
||||
def self.available_includes
|
||||
includes_array = [:creator, :updater, :topic, :dtext_links, :votes, :tag_alias, :tag_implication, :bulk_update_request]
|
||||
includes_array << :moderation_reports if CurrentUser.is_moderator?
|
||||
includes_array
|
||||
[:creator, :updater, :topic, :dtext_links, :votes, :tag_alias, :tag_implication, :bulk_update_request]
|
||||
end
|
||||
end
|
||||
|
||||
Reference in New Issue
Block a user