Redstoner/redstoner.com
Archived
0
Fork 0
Code Issues Pull Requests 2 Wiki Activity

Fix: Accessing threads in deleted forum, will deny access

Browse Source
This commit is contained in:
jomo
2014-06-26 22:27:30 +02:00
parent 0ea9bd2e33
commit b03adf66d8
1 changed files with 4 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
app/controllers/forumthreads_controller.rb
View File

@@ -72,12 +72,10 @@ class ForumthreadsController < ApplicationController
private private
def check_permission def check_permission
if params[:id] @thread = Forumthread.find(params[:id])
@thread = Forumthread.find(params[:id]) unless @thread.can_read?(current_user)
unless @thread.can_read?(current_user) flash[:alert] = "You are not allowed to view this thread"
flash[:alert] = "You are not allowed to view this thread" redirect_to forums_path
redirect_to forums_path
end
end end
end end