Don't show suspended users in autocomplete fields unless you are staff

This commit is contained in:
Neil Lalonde
2014-05-13 11:44:06 -04:00
parent 2d8a4ee91f
commit 6e0eb89697
3 changed files with 35 additions and 19 deletions

View File

@@ -295,7 +295,7 @@ class UsersController < ApplicationController
topic_id = params[:topic_id]
topic_id = topic_id.to_i if topic_id
results = UserSearch.new(term, topic_id).search
results = UserSearch.new(term, topic_id: topic_id, searching_user: current_user).search
user_fields = [:username, :use_uploaded_avatar, :upload_avatar_template, :uploaded_avatar_id]
user_fields << :name if SiteSetting.enable_names?