Skip to content
Snippets Groups Projects
Unverified Commit 9088fe71 authored by luap42's avatar luap42 Committed by GitHub
Browse files

Fix privilege escalation for tools display

Sounds scarier than it is; it's just that Tools and Show Flags Inline buttons were visible to the post author, even if they didn't have the flag_curate Abilities and so they were not connected to any action.
parent dee1a846
No related branches found
No related tags found
No related merge requests found
......@@ -230,6 +230,8 @@
<% end %>
<% end %>
<% end %>
<% end %>
<% if check_your_privilege('flag_curate') %>
<a href="javascript:void(0);" data-modal="#mod-tools-<%= post.id %>" class="tools--item">
<i class="fa fa-wrench"></i>
Tools
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment