Extend AUTHORIZED_FETCH mode to user blocks as well (#11332)

* Extend AUTHORIZED_FETCH mode to user blocks as well

* Move decision to deny access to StatusPolicy
remotes/1727458204337373841/tmp_refs/heads/signup-info-prompt
ThibG 2019-07-17 01:53:37 +02:00 committed by Eugen Rochko
parent 15ddabf95a
commit 5599caef49
1 changed files with 7 additions and 1 deletions

View File

@ -17,7 +17,7 @@ class StatusPolicy < ApplicationPolicy
elsif private?
owned? || following_author? || mention_exists?
else
current_account.nil? || !author_blocking?
current_account.nil? || (!author_blocking? && !author_blocking_domain?)
end
end
@ -63,6 +63,12 @@ class StatusPolicy < ApplicationPolicy
end
end
def author_blocking_domain?
return false if current_account.nil? || current_account.domain.nil?
author.blocking_domain?(current_account.domain)
end
def blocking_author?
return false if current_account.nil?