* Display appropriate error when performing unpermitted operation on custom emoji Fixes #13897 * Remove links to custom emoji actions not performable by moderators
		
			
				
	
	
		
			79 lines
		
	
	
		
			2.0 KiB
		
	
	
	
		
			Ruby
		
	
	
	
	
	
			
		
		
	
	
			79 lines
		
	
	
		
			2.0 KiB
		
	
	
	
		
			Ruby
		
	
	
	
	
	
| # frozen_string_literal: true
 | |
| 
 | |
| module Admin
 | |
|   class CustomEmojisController < BaseController
 | |
|     def index
 | |
|       authorize :custom_emoji, :index?
 | |
| 
 | |
|       @custom_emojis = filtered_custom_emojis.eager_load(:local_counterpart).page(params[:page])
 | |
|       @form          = Form::CustomEmojiBatch.new
 | |
|     end
 | |
| 
 | |
|     def new
 | |
|       authorize :custom_emoji, :create?
 | |
| 
 | |
|       @custom_emoji = CustomEmoji.new
 | |
|     end
 | |
| 
 | |
|     def create
 | |
|       authorize :custom_emoji, :create?
 | |
| 
 | |
|       @custom_emoji = CustomEmoji.new(resource_params)
 | |
| 
 | |
|       if @custom_emoji.save
 | |
|         log_action :create, @custom_emoji
 | |
|         redirect_to admin_custom_emojis_path, notice: I18n.t('admin.custom_emojis.created_msg')
 | |
|       else
 | |
|         render :new
 | |
|       end
 | |
|     end
 | |
| 
 | |
|     def batch
 | |
|       @form = Form::CustomEmojiBatch.new(form_custom_emoji_batch_params.merge(current_account: current_account, action: action_from_button))
 | |
|       @form.save
 | |
|     rescue ActionController::ParameterMissing
 | |
|       flash[:alert] = I18n.t('admin.accounts.no_account_selected')
 | |
|     rescue Mastodon::NotPermittedError
 | |
|       flash[:alert] = I18n.t('admin.custom_emojis.not_permitted')
 | |
|     ensure
 | |
|       redirect_to admin_custom_emojis_path(filter_params)
 | |
|     end
 | |
| 
 | |
|     private
 | |
| 
 | |
|     def resource_params
 | |
|       params.require(:custom_emoji).permit(:shortcode, :image, :visible_in_picker)
 | |
|     end
 | |
| 
 | |
|     def filtered_custom_emojis
 | |
|       CustomEmojiFilter.new(filter_params).results
 | |
|     end
 | |
| 
 | |
|     def filter_params
 | |
|       params.slice(:page, *CustomEmojiFilter::KEYS).permit(:page, *CustomEmojiFilter::KEYS)
 | |
|     end
 | |
| 
 | |
|     def action_from_button
 | |
|       if params[:update]
 | |
|         'update'
 | |
|       elsif params[:list]
 | |
|         'list'
 | |
|       elsif params[:unlist]
 | |
|         'unlist'
 | |
|       elsif params[:enable]
 | |
|         'enable'
 | |
|       elsif params[:disable]
 | |
|         'disable'
 | |
|       elsif params[:copy]
 | |
|         'copy'
 | |
|       elsif params[:delete]
 | |
|         'delete'
 | |
|       end
 | |
|     end
 | |
| 
 | |
|     def form_custom_emoji_batch_params
 | |
|       params.require(:form_custom_emoji_batch).permit(:action, :category_id, :category_name, custom_emoji_ids: [])
 | |
|     end
 | |
|   end
 | |
| end
 |