post_disapprovals/index: don't show usernames to other users.

* Don't show who disapproved the post to other users. Only show the creator to mods or to the disapprover themselves. * Let unprivileged users see the /post_disapprovals index.
2020-02-16 20:25:01 -06:00
parent ff8bfee9eb
commit 9ef80d7344
3 changed files with 16 additions and 9 deletions
--- a/app/controllers/post_disapprovals_controller.rb
+++ b/app/controllers/post_disapprovals_controller.rb
@@ -1,5 +1,5 @@
 class PostDisapprovalsController < ApplicationController
-  before_action :approver_only
+  before_action :approver_only, only: [:create]
  skip_before_action :api_check
  respond_to :js, :html, :json, :xml