FIX: Hide the post history for TL4 (#10065)
This commit is contained in:
parent
d21a08c284
commit
db1bebddce
|
@ -220,7 +220,7 @@ module PostGuardian
|
|||
end
|
||||
|
||||
authenticated? &&
|
||||
(is_staff? || @user.has_trust_level?(TrustLevel[4]) || @user.id == post.user_id) &&
|
||||
(is_staff? || @user.id == post.user_id) &&
|
||||
can_see_post?(post)
|
||||
end
|
||||
|
||||
|
|
|
@ -890,12 +890,9 @@ describe Guardian do
|
|||
expect(Guardian.new(moderator).can_see?(post_revision)).to be_truthy
|
||||
end
|
||||
|
||||
it 'is true for trust level 4' do
|
||||
expect(Guardian.new(trust_level_4).can_see?(post_revision)).to be_truthy
|
||||
end
|
||||
|
||||
it 'is false for trust level lower than 4' do
|
||||
it 'is false for trust level equal or lower than 4' do
|
||||
expect(Guardian.new(trust_level_3).can_see?(post_revision)).to be_falsey
|
||||
expect(Guardian.new(trust_level_4).can_see?(post_revision)).to be_falsey
|
||||
end
|
||||
end
|
||||
end
|
||||
|
|
|
@ -1323,10 +1323,10 @@ describe PostsController do
|
|||
expect(response.status).to eq(200)
|
||||
end
|
||||
|
||||
it "ensures trust level 4 can see the revisions" do
|
||||
it "ensures trust level 4 cannot see the revisions" do
|
||||
sign_in(Fabricate(:user, trust_level: 4))
|
||||
get "/posts/#{post_revision.post_id}/revisions/#{post_revision.number}.json"
|
||||
expect(response.status).to eq(200)
|
||||
expect(response.status).to eq(403)
|
||||
end
|
||||
end
|
||||
|
||||
|
|
Loading…
Reference in New Issue