mod actions: fix ip unban and modreport actions being visible to non-mods.

Fix IP unban actions and moderation report handled/rejected actions
being visible to non-moderators in the mod actions log.

Moderation report actions didn't leak the modreport itself, but it did
leak which moderator handled or rejected it.
This commit is contained in:
evazion
2022-09-25 23:11:52 -05:00
parent 17c6a2d77b
commit 75a2814f18
2 changed files with 21 additions and 1 deletions

View File

@@ -77,7 +77,7 @@ class ModAction < ApplicationRecord
if user.is_moderator?
all
else
where.not(category: [:ip_ban_create, :ip_ban_delete])
where.not(category: [:ip_ban_create, :ip_ban_delete, :ip_ban_undelete, :moderation_report_handled, :moderation_report_rejected])
end
end