From df2d13d42e9790e2ca7001d26919a31d4bddfe69 Mon Sep 17 00:00:00 2001 From: evazion Date: Tue, 23 Aug 2022 14:50:31 -0500 Subject: [PATCH] upgrade codes: fix upgrade code leak in BigQuery dumps. Fix upgrade codes being leaked in BigQuery data dumps. --- app/models/upgrade_code.rb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/app/models/upgrade_code.rb b/app/models/upgrade_code.rb index 94db73d81..698151779 100644 --- a/app/models/upgrade_code.rb +++ b/app/models/upgrade_code.rb @@ -25,6 +25,8 @@ class UpgradeCode < ApplicationRecord def self.visible(user) if user.is_owner? all + elsif user.is_anonymous? + none else where(redeemer: user).or(where(creator: user)) end