post disapprovals: fix disapprovers being visible in API.

This commit is contained in:
evazion
2021-03-10 15:56:41 -06:00
parent 5a790ee25a
commit 791b8c61f6

View File

@@ -13,7 +13,7 @@ class PostDisapprovalPolicy < ApplicationPolicy
def api_attributes
attributes = super
attributes -= [:creator_id] unless can_view_creator?
attributes -= [:user_id] unless can_view_creator?
attributes
end
end