random-mirrors/gab-social
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Added authorization to pin group statuses

Browse Source 
• Added:
- authorization to pin group statuses
This commit is contained in:
mgabdev 2020-10-06 19:46:30 -04:00
parent 9b044f233a
commit 33369c5fbf
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
app/controllers/api/v1/groups/pins_controller.rb
View File

@ -11,11 +11,15 @@ class Api::V1::Groups::PinsController < Api::BaseController
respond_to :json respond_to :json
def create def create
authorize @group, :update?
GroupPinnedStatus.create!(group: @group, status: @status) GroupPinnedStatus.create!(group: @group, status: @status)
render json: @status, serializer: REST::StatusSerializer render json: @status, serializer: REST::StatusSerializer
end end
def destroy def destroy
authorize @group, :update?
pin = GroupPinnedStatus.find_by(group: @group, status: @status) pin = GroupPinnedStatus.find_by(group: @group, status: @status)
if pin if pin