Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-07-31 | Add test to disallow remote users from fetching local-only toots | Thibaut Girka | |
2017-11-17 | Update StatusPolicy to check current_account for local_only? toots. | David Yip | |
StatusPolicy#account was renamed to StatusPolicy#current_account in upstream. This commit renames the local-only changes to match and augments the #show? policy spec with what we expect for local-only toots. | |||
2017-05-30 | Add status destroy authorization to policy (#3453) | Jack Jennings | |
* Add status destroy authorization to policy * Create explicit unreblog status authorization | |||
2017-05-30 | Fix incorrect visibility setter in StatusPolicySpec (#3456) | Jack Jennings | |
2017-05-30 | Move status reblog authorization into policy (#3425) | Jack Jennings | |
2017-05-29 | Extract authorization policy for viewing statuses (#3150) | Jack Jennings | |