Ensure only people allowed to see the poll can actually vote (#10161)

This commit is contained in:
ThibG 2019-03-04 22:47:47 +01:00 committed by Eugen Rochko
parent f2a1b8b96b
commit 7a25bb858a

View file

@ -2,6 +2,6 @@
class PollPolicy < ApplicationPolicy
def vote?
!current_account.blocking?(record.account) && !record.account.blocking?(current_account)
StatusPolicy.new(current_account, record.status).show? && !current_account.blocking?(record.account) && !record.account.blocking?(current_account)
end
end