1
0
mirror of https://github.com/flarum/core.git synced 2025-08-13 11:54:32 +02:00

Only allow starting a discussion on a non-restricted tag if the user has the global permission

This commit is contained in:
Toby Zerner
2016-01-02 14:57:01 +10:30
parent ec5c639bb6
commit 290b426bf2

View File

@@ -13,7 +13,6 @@ namespace Flarum\Tags\Access;
use Flarum\Core\Access\AbstractPolicy;
use Flarum\Core\User;
use Flarum\Tags\Tag;
use Illuminate\Contracts\Events\Dispatcher;
use Illuminate\Database\Eloquent\Builder;
class TagPolicy extends AbstractPolicy
@@ -39,7 +38,7 @@ class TagPolicy extends AbstractPolicy
*/
public function startDiscussion(User $actor, Tag $tag)
{
if (! $tag->is_restricted
if ((! $tag->is_restricted && $actor->hasPermission('startDiscussion'))
|| $actor->hasPermission('tag' . $tag->id . '.startDiscussion')) {
return true;
}