Disallow remote users from viewing local-only toots

This commit is contained in:
Thibaut Girka 2018-07-31 15:00:08 +02:00 committed by ThibG
parent 9f2945ef80
commit c4bec9263c

View file

@ -12,7 +12,7 @@ class StatusPolicy < ApplicationPolicy
end
def show?
return false if local_only? && current_account.nil?
return false if local_only? && (current_account.nil? || !current_account.local?)
if direct?
owned? || mention_exists?