Disallow access to raw email for non-staff users (#17569)

2025-02-25 18:55:32 -06:00 · 2022-09-14 03:57:12 +02:00
parent dee8a1db20
commit 56555a0231
2 changed files with 2 additions and 3 deletions
--- a/lib/guardian/post_guardian.rb
+++ b/lib/guardian/post_guardian.rb
@@ -296,7 +296,7 @@ module PostGuardian
  end

  def can_view_raw_email?(post)
-    post && (is_staff? || post.user_id == @user.id)
+    post && is_staff?
  end

  def can_unhide?(post)