From 791b8c61f65f663565138b6631c9b80fdc2ea2b2 Mon Sep 17 00:00:00 2001 From: evazion Date: Wed, 10 Mar 2021 15:56:41 -0600 Subject: [PATCH] post disapprovals: fix disapprovers being visible in API. --- app/policies/post_disapproval_policy.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/policies/post_disapproval_policy.rb b/app/policies/post_disapproval_policy.rb index e5f9b273f..cf2416ebe 100644 --- a/app/policies/post_disapproval_policy.rb +++ b/app/policies/post_disapproval_policy.rb @@ -13,7 +13,7 @@ class PostDisapprovalPolicy < ApplicationPolicy def api_attributes attributes = super - attributes -= [:creator_id] unless can_view_creator? + attributes -= [:user_id] unless can_view_creator? attributes end end