mod actions: fix ip unban and modreport actions being visible to non-mods.
Fix IP unban actions and moderation report handled/rejected actions being visible to non-moderators in the mod actions log. Moderation report actions didn't leak the modreport itself, but it did leak which moderator handled or rejected it.
This commit is contained in:
@@ -77,7 +77,7 @@ class ModAction < ApplicationRecord
|
||||
if user.is_moderator?
|
||||
all
|
||||
else
|
||||
where.not(category: [:ip_ban_create, :ip_ban_delete])
|
||||
where.not(category: [:ip_ban_create, :ip_ban_delete, :ip_ban_undelete, :moderation_report_handled, :moderation_report_rejected])
|
||||
end
|
||||
end
|
||||
|
||||
|
||||
Reference in New Issue
Block a user