Redstoner/redstoner.com
Archived
0
Fork 0
Code Issues Pull Requests 2 Wiki Activity

check mod+ rank when dealing with forum threads

Browse Source
This commit is contained in:
jomo
2016-07-19 14:56:00 +02:00
parent f6929da548
commit f2353eebcc
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/controllers/forumthreads_controller.rb
View File

@@ -11,7 +11,7 @@ class ForumthreadsController < ApplicationController
end
def edit
unless mod? || @thread.author.is?(current_user)
unless (mod? && current_user.role >= @thread.author.role) || @thread.author.is?(current_user)
flash[:alert] = "You are not allowed to edit this thread!"
redirect_to @thread
end
@@ -46,7 +46,7 @@ class ForumthreadsController < ApplicationController
end
def update
if mod? || @thread.author.is?(current_user)
if (mod? && current_user.role >= @thread.author.role) || @thread.author.is?(current_user)
@thread.user_editor = current_user
@thread.attributes = (mod? ? thread_params([:sticky, :locked, :forum_id, :label_id]) : thread_params)
old_content = @thread.content_was
@@ -64,7 +64,7 @@ class ForumthreadsController < ApplicationController
end
def destroy
if mod? || @thread.author.is?(current_user)
if (mod? && current_user.role >= @thread.author.role) || @thread.author.is?(current_user)
if @thread.destroy
flash[:notice] = "Thread deleted!"
else