Ensure only people allowed to see the poll can actually vote (#10161)

2019-03-04 22:47:47 +01:00 · 2019-03-04 22:47:47 +01:00 · 7a25bb858a
parent f2a1b8b96b
commit 7a25bb858a
1 changed files with 1 additions and 1 deletions
--- a/app/policies/poll_policy.rb
+++ b/app/policies/poll_policy.rb
@ -2,6 +2,6 @@

 class PollPolicy < ApplicationPolicy
  def vote?
-    !current_account.blocking?(record.account) && !record.account.blocking?(current_account)
+    StatusPolicy.new(current_account, record.status).show? && !current_account.blocking?(record.account) && !record.account.blocking?(current_account)
  end
 end