* Add status destroy authorization to policy * Create explicit unreblog status authorization
		
			
				
	
	
		
			35 lines
		
	
	
	
		
			697 B
		
	
	
	
		
			Ruby
		
	
	
	
	
	
			
		
		
	
	
			35 lines
		
	
	
	
		
			697 B
		
	
	
	
		
			Ruby
		
	
	
	
	
	
| # frozen_string_literal: true
 | |
| 
 | |
| module Admin
 | |
|   class ReportedStatusesController < BaseController
 | |
|     include Authorization
 | |
| 
 | |
|     before_action :set_report
 | |
|     before_action :set_status
 | |
| 
 | |
|     def update
 | |
|       @status.update(status_params)
 | |
|       redirect_to admin_report_path(@report)
 | |
|     end
 | |
| 
 | |
|     def destroy
 | |
|       authorize @status, :destroy?
 | |
|       RemovalWorker.perform_async(@status.id)
 | |
|       redirect_to admin_report_path(@report)
 | |
|     end
 | |
| 
 | |
|     private
 | |
| 
 | |
|     def status_params
 | |
|       params.require(:status).permit(:sensitive)
 | |
|     end
 | |
| 
 | |
|     def set_report
 | |
|       @report = Report.find(params[:report_id])
 | |
|     end
 | |
| 
 | |
|     def set_status
 | |
|       @status = @report.statuses.find(params[:id])
 | |
|     end
 | |
|   end
 | |
| end
 |