SECURITY: dissalow mods from seeing PMs

This commit is contained in:
Sam
2014-02-07 14:24:19 +11:00
parent 93434be16d
commit d9c05fcfc8
3 changed files with 11 additions and 3 deletions
@@ -15,7 +15,7 @@ Discourse.UserController = Discourse.ObjectController.extend({
collapsedInfo: Em.computed.not('indexStream'),
canSeePrivateMessages: function() {
return this.get('viewingSelf') || Discourse.User.currentProp('staff');
return this.get('viewingSelf') || Discourse.User.currentProp('admin');
}.property('viewingSelf'),
privateMessageView: function() {