Fix using wrong policy on status-related actions in admin UI (#19490)

This commit is contained in:
Eugen Rochko authored and GitHub committed 2022-10-28 00:48:30 +02:00
1 parent 8ae0936ddd
commit 07cc201acc
2 files changed
+4 -4

No files matched your search

+2 -2
View File
@@ -30,7 +30,7 @@ class Trends::StatusBatch
end
def approve!
statuses.each { |status| authorize(status, :review?) }
statuses.each { |status| authorize([:admin, status], :review?) }
statuses.update_all(trendable: true)
end
@@ -45,7 +45,7 @@ class Trends::StatusBatch
end
def reject!
statuses.each { |status| authorize(status, :review?) }
statuses.each { |status| authorize([:admin, status], :review?) }
statuses.update_all(trendable: false)
end