Fix saved searces, news updates, ip bans being dumped to BigQuery.

Prevent saved searches, news updates, and ip bans from being publicly
dumped to BigQuery. They didn't override the `visible` method to
restrict their visibility for anonymous users.
This commit is contained in:
evazion
2021-03-10 02:25:56 -06:00
parent f235b72b3f
commit b169d60f64
7 changed files with 38 additions and 4 deletions

View File

@@ -2,6 +2,14 @@ class ForumTopicVisit < ApplicationRecord
belongs_to :user
belongs_to :forum_topic
def self.visible(user)
if user.is_owner?
all
else
where(user: user)
end
end
def self.prune!(user)
where("user_id = ? and last_read_at < ?", user.id, user.last_forum_read_at).delete_all
end