mirror/php-flarum
1
0
Fork 0
mirror of https://github.com/flarum/core.git synced 2025-08-16 05:14:20 +02:00
Code Issues Releases Wiki Activity

Only allow starting a discussion on a non-restricted tag if the user has the global permission

Browse Source
This commit is contained in:
Toby Zerner
2016-01-02 14:57:01 +10:30
parent ec5c639bb6
commit 290b426bf2
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
extensions/tags/src/Access/TagPolicy.php
View File

@@ -13,7 +13,6 @@ namespace Flarum\Tags\Access;
use Flarum\Core\Access\AbstractPolicy; use Flarum\Core\Access\AbstractPolicy;
use Flarum\Core\User; use Flarum\Core\User;
use Flarum\Tags\Tag; use Flarum\Tags\Tag;
use Illuminate\Contracts\Events\Dispatcher;
use Illuminate\Database\Eloquent\Builder; use Illuminate\Database\Eloquent\Builder;
class TagPolicy extends AbstractPolicy class TagPolicy extends AbstractPolicy
@@ -39,7 +38,7 @@ class TagPolicy extends AbstractPolicy
*/ */
public function startDiscussion(User $actor, Tag $tag) public function startDiscussion(User $actor, Tag $tag)
{ {
if (! $tag->is_restricted if ((! $tag->is_restricted && $actor->hasPermission('startDiscussion'))
|| $actor->hasPermission('tag' . $tag->id . '.startDiscussion')) { || $actor->hasPermission('tag' . $tag->id . '.startDiscussion')) {
return true; return true;
} }