mirror of
https://github.com/discourse/discourse.git
synced 2026-08-26 21:27:16 -05:00
SECURITY: dissalow mods from seeing PMs
This commit is contained in:
@@ -15,7 +15,7 @@ Discourse.UserController = Discourse.ObjectController.extend({
|
||||
collapsedInfo: Em.computed.not('indexStream'),
|
||||
|
||||
canSeePrivateMessages: function() {
|
||||
return this.get('viewingSelf') || Discourse.User.currentProp('staff');
|
||||
return this.get('viewingSelf') || Discourse.User.currentProp('admin');
|
||||
}.property('viewingSelf'),
|
||||
|
||||
privateMessageView: function() {
|
||||
|
||||
Reference in New Issue
Block a user