FIX: don't show contents of hidden posts when quoting the post and when replying as new topic. Also don't allow public to view edit history of hidden posts.

2025-02-25 18:55:32 -06:00 · 2014-04-15 12:48:49 -04:00
parent f0e8423445
commit 91bfd47419
3 changed files with 31 additions and 2 deletions
--- a/app/serializers/post_serializer.rb
+++ b/app/serializers/post_serializer.rb
@@ -176,7 +176,7 @@ class PostSerializer < BasicPostSerializer
  end

  def include_raw?
-    @add_raw.present?
+    @add_raw.present? && (scope.user.try(:staff?) || yours)
  end

  def include_link_counts?