From d99a9b67359da7b9e1bfab9abee5cb4c178b79a8 Mon Sep 17 00:00:00 2001 From: Sam Date: Sat, 5 Jul 2014 16:56:26 +1000 Subject: [PATCH] FIX: invite security check broke PM viewing for all admins --- lib/guardian.rb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/lib/guardian.rb b/lib/guardian.rb index f358378890d..62f40d1689c 100644 --- a/lib/guardian.rb +++ b/lib/guardian.rb @@ -201,7 +201,8 @@ class Guardian def can_invite_to?(object, group_ids=nil) can_invite = can_see?(object) && can_invite_to_forum? && ( group_ids.blank? || is_admin? ) - can_invite = can_invite && ( !object.category.read_restricted || is_admin? ) if object.is_a?(Topic) + #TODO how should invite to PM work? + can_invite = can_invite && ( !object.category.read_restricted || is_admin? ) if object.is_a?(Topic) && object.category can_invite end