discourse/lib/staff_constraint.rb

require_dependency 'current_user'

class StaffConstraint

  def matches?(request)
    provider = Discourse.current_user_provider.new(request.env)
    provider.current_user && provider.current_user.staff?
  rescue Discourse::InvalidAccess
    false
  end

end
moderators now have teeth, more at http://meta.discourse.org/t/moderator-permission-set/6307/5 allow pms to be targetted at groups 2013-05-02 00:15:17 -05:00			`require_dependency 'current_user'`

:s/moderator?/staff/g ... our naming was kind of crazy, renamed moderator? to staff 2013-05-02 02:22:27 -05:00			`class StaffConstraint`
moderators now have teeth, more at http://meta.discourse.org/t/moderator-permission-set/6307/5 allow pms to be targetted at groups 2013-05-02 00:15:17 -05:00
			`def matches?(request)`
add current_user_provider so people can override current_user bevior cleanly, see http://meta.discourse.org/t/amending-current-user-logic-in-discourse/10278 2013-10-08 23:10:37 -05:00			`provider = Discourse.current_user_provider.new(request.env)`
			`provider.current_user && provider.current_user.staff?`
FIX: Return 404 if API access is invalid. 2017-08-10 04:27:01 -05:00			`rescue Discourse::InvalidAccess`
			`false`
moderators now have teeth, more at http://meta.discourse.org/t/moderator-permission-set/6307/5 allow pms to be targetted at groups 2013-05-02 00:15:17 -05:00			`end`

			`end`