413cd34c45
* Tie rate limits to both the user's ID and their IP address. * Make each endpoint have separate rate limits. This means that, for example, your post edit rate limit is separate from your post vote rate limit. Before all write actions had a shared rate limit. * Make all write endpoints have rate limits. Before some endpoints, such as voting, favoriting, commenting, or forum posting, weren't subject to rate limits. * Add stricter rate limits for some endpoints: ** 1 per 5 minutes for creating new accounts. ** 1 per minute for login attempts, changing your email address, or for creating mod reports. ** 1 per minute for sending dmails, creating comments, creating forum posts, or creating forum topics. ** 1 per second for voting, favoriting, or disapproving posts. ** These rate limits all have burst factors high enough that they shouldn't affect normal, non-automated users. * Raise the default write rate limit for Gold users from 2 per second to 4 per second, for all other actions not listed above. * Raise the default burst factor to 200 for all other actions not listed above. Before it was 10 for Members, 30 for Gold, and 60 for Platinum.
17 lines
517 B
Ruby
17 lines
517 B
Ruby
class PostDisapprovalsController < ApplicationController
|
|
respond_to :js, :html, :json, :xml
|
|
|
|
def create
|
|
@post_disapproval = authorize PostDisapproval.new(user: CurrentUser.user, **permitted_attributes(PostDisapproval))
|
|
@post_disapproval.save
|
|
respond_with(@post_disapproval)
|
|
end
|
|
|
|
def index
|
|
@post_disapprovals = authorize PostDisapproval.paginated_search(params)
|
|
@post_disapprovals = @post_disapprovals.includes(:user) if request.format.html?
|
|
|
|
respond_with(@post_disapprovals)
|
|
end
|
|
end
|