techhub/mastodon
2
0
Fork 0
Code Activity

Refactor settings controllers (#14767)

Browse Source 
- Disallow suspended accounts from revoking sessions and apps
- Allow suspended accounts to access exports
This commit is contained in:
Eugen Rochko
2020-09-11 20:56:35 +02:00
committed by GitHub
parent e6b272e5c9
commit 4e4b3a0c8e
31 changed files with 65 additions and 118 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
app/controllers/oauth/authorized_applications_controller.rb
View File

@@ -5,6 +5,7 @@ class Oauth::AuthorizedApplicationsController < Doorkeeper::AuthorizedApplicatio
before_action :store_current_location
before_action :authenticate_resource_owner!
before_action :require_not_suspended!, only: :destroy
before_action :set_body_classes
skip_before_action :require_functional!
@@ -25,4 +26,8 @@ class Oauth::AuthorizedApplicationsController < Doorkeeper::AuthorizedApplicatio
def store_current_location
store_location_for(:user, request.url)
end
def require_not_suspended!
forbidden if current_account.suspended?
end
end