nocebo/diaspora
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

API: correct like and comment scopes for private posts

Browse source
This commit is contained in:
Jonne Haß 2020-01-30 23:42:09 +01:00
parent fbd0a51829
commit 0754c92116
2 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/controllers/api/v1/comments_controller.rb
View file

@ -8,7 +8,7 @@ module Api
end end
before_action only: %i[create destroy] do before_action only: %i[create destroy] do
require_access_token %w[interactions public:modify] require_access_token %w[interactions public:read]
end end
rescue_from ActiveRecord::RecordNotFound do rescue_from ActiveRecord::RecordNotFound do

4
app/controllers/api/v1/likes_controller.rb
View file

@ -31,7 +31,7 @@ module Api
def create def create
post = post_service.find!(params.require(:post_id)) post = post_service.find!(params.require(:post_id))
raise ActiveRecord::RecordInvalid unless post.public? || private_modify? raise ActiveRecord::RecordInvalid unless post.public? || private_read?
like_service.create(params[:post_id]) like_service.create(params[:post_id])
rescue ActiveRecord::RecordInvalid => e rescue ActiveRecord::RecordInvalid => e
@ -46,7 +46,7 @@ module Api
def destroy def destroy
post = post_service.find!(params.require(:post_id)) post = post_service.find!(params.require(:post_id))
raise ActiveRecord::RecordInvalid unless post.public? || private_modify? raise ActiveRecord::RecordInvalid unless post.public? || private_read?
success = like_service.unlike_post(params[:post_id]) success = like_service.unlike_post(params[:post_id])
if success if success