enable user privacy mode for displaying favorites

2016-02-22 12:18:19 -08:00
parent b165fec66a
commit caf4a28b02
8 changed files with 43 additions and 5 deletions
--- a/app/logical/post_query_builder.rb
+++ b/app/logical/post_query_builder.rb
@@ -350,6 +350,12 @@ class PostQueryBuilder

    if q[:ordfav].present?
      user_id = q[:ordfav].to_i
+      user = User.find(user_id)
+
+      if user.hide_favorites?
+        raise User::PrivilegeError.new
+      end
+
      relation = relation.joins("INNER JOIN favorites ON favorites.post_id = posts.id")
      relation = relation.where("favorites.user_id % 100 = ? and favorites.user_id = ?", user_id % 100, user_id).order("favorites.id DESC")
    end