discourse/lib/guardian
Blake Erickson 5b5b5a5931 FIX: return an error if a user tries to whisper
This commit fixes a bug where a user creates a whisper post via the api
but is posted as a regular message because they don't have access to
whisper. Now a 403 unauthorized will be returned instead of the whisper
param just being ignored for regular users. Staff users should not be
affected by this change.

https://meta.discourse.org/t/a-whisper-is-posted-as-a-message-if-the-user-is-not-staff-moderator-admin-when-using-the-api/116601
2019-05-07 11:42:26 -06:00
..
category_guardian.rb REFACTOR: Rename site settings to make them less confusing 2019-03-14 13:40:14 +01:00
ensure_magic.rb FEATURE: vanilla import 2014-04-18 18:42:31 +02:00
group_guardian.rb PERF: Avoid looking up the same group multiple times during bulk invite. 2019-04-16 09:42:25 +08:00
post_guardian.rb FEATURE: Flag count in post menu 2019-05-06 16:13:31 -04:00
post_revision_guardian.rb LOTS of changes to properly handle post/topic revisions 2014-10-27 22:06:43 +01:00
tag_guardian.rb Fix missing avatars on topic list page. 2018-11-19 14:55:41 +08:00
topic_guardian.rb FIX: return an error if a user tries to whisper 2019-05-07 11:42:26 -06:00
user_guardian.rb FIX: prevent anonymous users from changing their email/username/name (#7311) 2019-04-17 18:05:02 +10:00