db63b6d44f
Fix it being possible for users to delete or undelete their own forum posts and topics, even if they were deleted by a mod.
37 lines
737 B
Ruby
37 lines
737 B
Ruby
class ForumTopicPolicy < ApplicationPolicy
|
|
def show?
|
|
user.level >= record.min_level
|
|
end
|
|
|
|
def update?
|
|
unbanned? && show? && (user.is_moderator? || (record.creator_id == user.id && !record.is_locked?))
|
|
end
|
|
|
|
def destroy?
|
|
unbanned? && show? && user.is_moderator?
|
|
end
|
|
|
|
def undelete?
|
|
unbanned? && show? && user.is_moderator?
|
|
end
|
|
|
|
def mark_all_as_read?
|
|
user.is_member?
|
|
end
|
|
|
|
def reply?
|
|
unbanned? && show? && (user.is_moderator? || !record.is_locked?)
|
|
end
|
|
|
|
def moderate?
|
|
user.is_moderator?
|
|
end
|
|
|
|
def permitted_attributes
|
|
[
|
|
:title, :category_id, { original_post_attributes: [:id, :body] },
|
|
([:is_sticky, :is_locked, :min_level] if moderate?)
|
|
].compact.flatten
|
|
end
|
|
end
|