api: remove available_includes dependent on current user.
This is to avoid specifying permissions in multiple disjoint places and because most API users shouldn't need these fields.
This commit is contained in:
@@ -1768,9 +1768,6 @@ class Post < ApplicationRecord
|
||||
end
|
||||
|
||||
def self.available_includes
|
||||
includes_array = [:uploader, :updater, :approver, :parent, :upload, :artist_commentary, :flags, :appeals, :notes, :comments, :children, :approvals, :replacements]
|
||||
includes_array << :moderation_reports if CurrentUser.is_moderator?
|
||||
includes_array << :disapprovals if CurrentUser.user.is_approver?
|
||||
includes_array
|
||||
[:uploader, :updater, :approver, :parent, :upload, :artist_commentary, :flags, :appeals, :notes, :comments, :children, :approvals, :replacements]
|
||||
end
|
||||
end
|
||||
|
||||
Reference in New Issue
Block a user