mirror/php-flarum
1
0
Fork 0
mirror of https://github.com/flarum/core.git synced 2025-10-13 07:54:25 +02:00
Code Issues Releases Wiki Activity

Add viewUserList permission (#1190)

Browse Source
This commit is contained in:
David Sevilla Martín
2017-05-24 08:36:56 -04:00
committed by Toby Zerner
parent 305076814f
commit e64dc4ea45
5 changed files with 24 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/Api/Controller/ListUsersController.php
View File

@@ -12,6 +12,7 @@
namespace Flarum\Api\Controller;
use Flarum\Api\UrlGenerator;
use Flarum\Core\Exception\PermissionDeniedException;
use Flarum\Core\Search\SearchCriteria;
use Flarum\Core\Search\User\UserSearcher;
use Psr\Http\Message\ServerRequestInterface;
@@ -66,6 +67,11 @@ class ListUsersController extends AbstractCollectionController
protected function data(ServerRequestInterface $request, Document $document)
{
$actor = $request->getAttribute('actor');
if ($actor->cannot('viewUserList')) {
throw new PermissionDeniedException;
}
$query = array_get($this->extractFilter($request), 'q');
$sort = $this->extractSort($request);