pundit: convert post disapprovals to pundit.

2020-03-19 20:10:48 -05:00
parent 84c654464d
commit ba0a5dda8a
5 changed files with 42 additions and 32 deletions
--- a/app/models/post_disapproval.rb
+++ b/app/models/post_disapproval.rb
@@ -66,13 +66,9 @@ class PostDisapproval < ApplicationRecord
    super(message)
  end

-  def can_view_creator?(user)
-    user.is_moderator? || user_id == user.id
-  end
-
  def api_attributes
    attributes = super
-    attributes -= [:creator_id] unless can_view_creator?(CurrentUser.user)
+    attributes -= [:creator_id] unless Pundit.policy!([CurrentUser.user, nil], self).can_view_creator?
    attributes
  end
 end