From e1c4cf2566172b4461119f2c145764b978809100 Mon Sep 17 00:00:00 2001 From: Alan Guo Xiang Tan Date: Mon, 19 Aug 2024 13:46:28 +0800 Subject: [PATCH] DEV: Update `Guardian#is_developer` to only require admin for Developer (#28396) In development mode and when a developer's email is configured as part of `Rails.configuration.developer_emails`, the user can be trusted and should not be required to be an admin user. --- lib/guardian.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/guardian.rb b/lib/guardian.rb index 42555e14137..ddcead590a9 100644 --- a/lib/guardian.rb +++ b/lib/guardian.rb @@ -155,9 +155,9 @@ class Guardian end def is_developer? - @user && is_admin? && + @user && ( - Rails.env.development? || Developer.user_ids.include?(@user.id) || + Rails.env.development? || (is_admin? && Developer.user_ids.include?(@user.id)) || ( Rails.configuration.respond_to?(:developer_emails) && Rails.configuration.developer_emails.include?(@user.email)