9f2945ef80
Add test to disallow remote users from fetching local-only toots
2018-07-31 15:41:04 +02:00
f6355f6ffb
Update StatusPolicy to check current_account for local_only? toots.
...
StatusPolicy#account was renamed to StatusPolicy#current_account in
upstream. This commit renames the local-only changes to match and
augments the #show? policy spec with what we expect for local-only
toots.
2017-11-17 09:07:21 -06:00
33f669a5f8
Add status destroy authorization to policy ( #3453 )
...
* Add status destroy authorization to policy
* Create explicit unreblog status authorization
2017-05-30 22:56:31 +02:00
22cf18e16f
Fix incorrect visibility setter in StatusPolicySpec ( #3456 )
2017-05-30 22:14:32 +02:00
e031fd60ad
Move status reblog authorization into policy ( #3425 )
2017-05-30 15:16:14 +02:00
3a2003ba86
Extract authorization policy for viewing statuses ( #3150 )
2017-05-29 18:22:22 +02:00
Thibaut Girka
David Yip
Jack Jennings