Discource-C
/
discourse
mirror of https://github.com/discourse/discourse.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

FIX: invite security check broke PM viewing for all admins

This commit is contained in:
Sam 2014-07-05 16:56:26 +10:00
parent ebc8dd6c95
commit d99a9b6735
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
lib/guardian.rb
View File

@ -201,7 +201,8 @@ class Guardian
def can_invite_to?(object, group_ids=nil)
can_invite = can_see?(object) && can_invite_to_forum? && ( group_ids.blank? || is_admin? )
can_invite = can_invite && ( !object.category.read_restricted || is_admin? ) if object.is_a?(Topic)
#TODO how should invite to PM work?
can_invite = can_invite && ( !object.category.read_restricted || is_admin? ) if object.is_a?(Topic) && object.category
can_invite
end