github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-20 13:24:58 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

FIX: raise Discourse::NotFound unless the user is present

Browse Source
This commit is contained in:
Arpit Jalan 2018-11-21 10:57:42 +05:30
parent 10cc698df3
commit 61eff22b29
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/controllers/topics_controller.rb
View File

@ -500,9 +500,10 @@ class TopicsController < ApplicationController
def remove_allowed_user
params.require(:username)
topic = Topic.find_by(id: params[:topic_id])
user = User.find_by(username: params[:username])
raise Discourse::NotFound unless topic
user = User.find_by(username: params[:username])
raise Discourse::NotFound unless user
guardian.ensure_can_remove_allowed_users!(topic, user)
if topic.remove_allowed_user(current_user, user)