Files
mastodon/app/controllers/concerns/admin/permissions_concern.rb
Juan Hernández Babón cbc5aeb504 Fixes GHSA-62j4-hvj7-px3f
2026-09-01 12:12:57 +02:00

17 lines
440 B
Ruby

# frozen_string_literal: true
module Admin::PermissionsConcern
extend ActiveSupport::Concern
included do
before_action :require_moderator_or_admin_permissions
end
private
def require_moderator_or_admin_permissions
# not using #authorize here, so #verify_authorized still makes sure more fine-grained rules are enforced down the line
forbidden unless Admin::BasePolicy.new(current_account, :base).access?
end
end