discourse/lib/staff_constraint.rb

require_dependency 'current_user'

class StaffConstraint

  def matches?(request)
    provider = Discourse.current_user_provider.new(request.env)
    provider.current_user && provider.current_user.staff?
  rescue Discourse::InvalidAccess
    false
  end

end
moderators now have teeth, more at http://meta.discourse.org/t/moderator-permission-set/6307/5 allow pms to be targetted at groups 2013-05-02 15:15:17 +10:00			`require_dependency 'current_user'`

:s/moderator?/staff/g ... our naming was kind of crazy, renamed moderator? to staff 2013-05-02 17:22:27 +10:00			`class StaffConstraint`
moderators now have teeth, more at http://meta.discourse.org/t/moderator-permission-set/6307/5 allow pms to be targetted at groups 2013-05-02 15:15:17 +10:00
			`def matches?(request)`
add current_user_provider so people can override current_user bevior cleanly, see http://meta.discourse.org/t/amending-current-user-logic-in-discourse/10278 2013-10-09 15:10:37 +11:00			`provider = Discourse.current_user_provider.new(request.env)`
			`provider.current_user && provider.current_user.staff?`
FIX: Return 404 if API access is invalid. 2017-08-10 18:27:01 +09:00			`rescue Discourse::InvalidAccess`
			`false`
moderators now have teeth, more at http://meta.discourse.org/t/moderator-permission-set/6307/5 allow pms to be targetted at groups 2013-05-02 15:15:17 +10:00			`end`

			`end`