Files
danbooru/app/logical/anonymous_user.rb
r888888888 abce4d2551 Raise error on unpermitted params.
Fail loudly if we forget to whitelist a param instead of silently
ignoring it.

misc models: convert to strong params.

artist commentaries: convert to strong params.

* Disallow changing or setting post_id to a nonexistent post.

artists: convert to strong params.

* Disallow setting `is_banned` in create/update actions. Changing it
  this way instead of with the ban/unban actions would leave the artist in
  a partially banned state.

bans: convert to strong params.

* Disallow changing the user_id after the ban has been created.

comments: convert to strong params.

favorite groups: convert to strong params.

news updates: convert to strong params.

post appeals: convert to strong params.

post flags: convert to strong params.

* Disallow users from setting the `is_deleted` / `is_resolved` flags.

ip bans: convert to strong params.

user feedbacks: convert to strong params.

* Disallow users from setting `disable_dmail_notification` when creating feedbacks.
* Disallow changing the user_id after the feedback has been created.

notes: convert to strong params.

wiki pages: convert to strong params.

* Also fix non-Builders being able to delete wiki pages.

saved searches: convert to strong params.

pools: convert to strong params.

* Disallow setting `post_count` or `is_deleted` in create/update actions.

janitor trials: convert to strong params.

post disapprovals: convert to strong params.

* Factor out quick-mod bar to shared partial.
* Fix quick-mod bar to use `Post#is_approvable?` to determine visibility
  of Approve button.

dmail filters: convert to strong params.

password resets: convert to strong params.

user name change requests: convert to strong params.

posts: convert to strong params.

users: convert to strong params.

* Disallow setting password_hash, last_logged_in_at, last_forum_read_at,
  has_mail, and dmail_filter_attributes[user_id].

* Remove initialize_default_image_size (dead code).

uploads: convert to strong params.

* Remove `initialize_status` because status already defaults to pending
  in the database.

tag aliases/implications: convert to strong params.

tags: convert to strong params.

forum posts: convert to strong params.

* Disallow changing the topic_id after creating the post.
* Disallow setting is_deleted (destroy/undelete actions should be used instead).
* Remove is_sticky / is_locked (nonexistent attributes).

forum topics: convert to strong params.

* merges https://github.com/evazion/danbooru/tree/wip-rails-5.1
* lock pg gem to 0.21 (1.0.0 is incompatible with rails 5.1.4)
* switch to factorybot and change all references

Co-authored-by: r888888888 <r888888888@gmail.com>
Co-authored-by: evazion <noizave@gmail.com>

add diffs
2018-04-06 18:09:57 -07:00

286 lines
3.1 KiB
Ruby

# This is a proxy class to make various nil checks unnecessary
class AnonymousUser
def id
nil
end
def level
0
end
def level_string
"Anonymous"
end
def comment_threshold
0
end
def created_at
Time.now
end
def updated_at
Time.now
end
def dmail_filter
nil
end
def name
"Anonymous"
end
def pretty_name
"Anonymous"
end
def is_anonymous?
true
end
def is_banned_or_ip_banned?
false
end
def has_mail?
false
end
def has_forum_been_updated?
false
end
def has_permission?(obj, foreign_key = :user_id)
false
end
def ban
false
end
def always_resize_images?
true
end
def show_samples?
true
end
def favorite_tags
nil
end
def upload_limit
0
end
def base_upload_limit
0
end
def uploaded_tags
""
end
def uploaded_tags_with_types
[]
end
def recent_tags
""
end
def recent_tags_with_types
[]
end
def can_upload?
false
end
def can_comment?
false
end
def is_comment_limited?
true
end
def can_remove_from_pools?
false
end
def can_view_flagger?(flagger_id)
false
end
def can_view_flagger_on_post?(flag)
false
end
def can_approve_posts?
false
end
def blacklisted_tags
["spoilers", "guro", "scat", "furry -rating:s"].join("\n")
end
def time_zone
"Eastern Time (US & Canada)"
end
def default_image_size
"large"
end
def email
""
end
def last_forum_read_at
Time.now
end
def update_column(*params)
end
def increment!(field)
end
def decrement!(field)
end
def role
:anonymous
end
def tag_query_limit
2
end
def favorite_limit
0
end
def favorite_count
0
end
def enable_post_navigation
true
end
def new_post_navigation_layout
true
end
def enable_privacy_mode
false
end
def hide_favorites?
false
end
def enable_sequential_post_navigation
true
end
def api_regen_multiplier
1
end
def api_burst_limit
5
end
def statement_timeout
3_000
end
def per_page
Danbooru.config.posts_per_page
end
def hide_deleted_posts?
false
end
def style_usernames?
false
end
def dmail_count
""
end
def enable_auto_complete
true
end
def custom_style
""
end
def show_deleted_children?
false
end
def saved_searches
SavedSearch.where(false)
end
def has_saved_searches?
false
end
def show_saved_searches?
false
end
def favorite_groups
[]
end
def can_upload_free?
false
end
def disable_categorized_saved_searches?
false
end
def disable_tagged_filenames?
false
end
def ban_expired?
false
end
def disable_cropped_thumbnails?
false
end
def disable_mobile_gestures?
false
end
def enable_safe_mode?
false
end
def disable_responsive_mode?
false
end
User::Roles.reject {|r| r == :anonymous}.each do |name|
define_method("is_#{name}?") do
false
end
end
end