1
0
mirror of https://github.com/flarum/core.git synced 2025-07-23 17:51:24 +02:00

Fix bad logic in edit permission that was allowing guests to edit posts. Closes #88

This commit is contained in:
Toby Zerner
2015-05-21 15:53:59 +09:30
parent 88fee92cd5
commit 089dafa93d

View File

@@ -197,8 +197,10 @@ class CoreServiceProvider extends ServiceProvider
// someone else.
Post::grantPermission('edit', function ($grant, $user) {
$grant->where('user_id', $user->id)
->whereNull('hide_user_id')
->orWhere('hide_user_id', $user->id);
->where(function ($query) use ($user) {
$query->whereNull('hide_user_id')
->orWhere('hide_user_id', $user->id);
});
// @todo add limitations to time etc. according to a config setting
});