Merge pull request #2775 from evazion/fix-user-feedbacks

Prevent mods from editing/deleting feedbacks given to themselves.
This commit is contained in:
Albert Yi
2016-11-28 12:02:47 -08:00
committed by GitHub
5 changed files with 24 additions and 4 deletions

View File

@@ -98,4 +98,8 @@ class UserFeedback < ActiveRecord::Base
return true
end
end
def editable_by?(editor)
(editor.is_moderator? && editor != user) || creator == editor
end
end