jaculabilis/danbooru
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge pull request #5197 from nonamethanks/fix-bur-links

Browse Source 
BURs: don't allow edits to approved scripts
This commit is contained in:
evazion
2022-06-01 18:37:09 -05:00
committed by GitHub
parent 173e43b192 5932d8d3a3
commit 434e44ba8b
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/policies/bulk_update_request_policy.rb
View File

@@ -6,7 +6,7 @@ class BulkUpdateRequestPolicy < ApplicationPolicy
end
def update?
unbanned? && (user.is_admin? || record.user_id == user.id)
unbanned? && !record.is_approved? && (user.is_admin? || record.user_id == user.id)
end
def approve?

6
app/views/bulk_update_requests/_bur_edit_links.html.erb
View File

@@ -1,9 +1,9 @@
<%# bur %>
<%= link_to_if policy(bur).approve?, "Approve", approve_bulk_update_request_path(bur), remote: true, method: :post, "data-confirm": "Are you sure you want to approve this bulk update request?" %> |
<%= link_to_if policy(bur).approve?, "Approve", approve_bulk_update_request_path(bur), remote: true, method: :post, "data-confirm": "Are you sure you want to approve this bulk update request?" %>
<% if policy(bur).destroy? %>
<%= link_to "Reject", bur, remote: true, method: :delete, "data-confirm": "Are you sure you want to reject this bulk update request?" %> |
| <%= link_to "Reject", bur, remote: true, method: :delete, "data-confirm": "Are you sure you want to reject this bulk update request?" %>
<% end %>
<% if policy(bur).update? %>
<%= link_to "Edit", edit_bulk_update_request_path(bur), :"data-shortcut" => "e" %>
| <%= link_to "Edit", edit_bulk_update_request_path(bur), :"data-shortcut" => "e" %>
<% end %>