Change REST API to return empty data for suspended accounts (#14765)

2020-09-11 15:16:29 +02:00
parent e6d67f85e2
commit e6b272e5c9
22 changed files with 79 additions and 30 deletions
--- a/app/policies/status_policy.rb
+++ b/app/policies/status_policy.rb
@@ -12,6 +12,8 @@ class StatusPolicy < ApplicationPolicy
  end

  def show?
+    return false if author.suspended?
+
    if requires_mention?
      owned? || mention_exists?
    elsif private?