IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

FIX: raise Discourse::NotFound unless the user is present

Browse Source
This commit is contained in:
Arpit Jalan 2018-11-21 10:57:42 +05:30
parent 10cc698df3
commit 61eff22b29
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/controllers/topics_controller.rb
View File

@ -500,9 +500,10 @@ class TopicsController < ApplicationController
def remove_allowed_user def remove_allowed_user
params.require(:username) params.require(:username)
topic = Topic.find_by(id: params[:topic_id]) topic = Topic.find_by(id: params[:topic_id])
user = User.find_by(username: params[:username])
raise Discourse::NotFound unless topic raise Discourse::NotFound unless topic
user = User.find_by(username: params[:username])
raise Discourse::NotFound unless user
guardian.ensure_can_remove_allowed_users!(topic, user) guardian.ensure_can_remove_allowed_users!(topic, user)
if topic.remove_allowed_user(current_user, user) if topic.remove_allowed_user(current_user, user)