github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-01-19 05:32:44 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

SECURITY: Moderators should not be able to access customizations

Browse Source
This commit is contained in:
Robin Ward 2017-01-06 14:42:36 -05:00
parent b0fe5d383e
commit ad9af94ac9
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
config/routes.rb
View File

@ -166,7 +166,8 @@ Discourse::Application.routes.draw do
post "flags/disagree/:id" => "flags#disagree"
post "flags/defer/:id" => "flags#defer"
resources :site_customizations, constraints: AdminConstraint.new
scope "/customize" do
scope "/customize", constraints: AdminConstraint.new do
resources :user_fields, constraints: AdminConstraint.new
resources :emojis, constraints: AdminConstraint.new