mirror of
https://github.com/discourse/discourse.git
synced 2024-12-15 06:33:41 +08:00
30990006a9
This reduces chances of errors where consumers of strings mutate inputs and reduces memory usage of the app. Test suite passes now, but there may be some stuff left, so we will run a few sites on a branch prior to merging
28 lines
687 B
Ruby
28 lines
687 B
Ruby
# frozen_string_literal: true
|
|
|
|
require_dependency 'current_user'
|
|
|
|
class AdminConstraint
|
|
|
|
def initialize(options = {})
|
|
@require_master = options[:require_master]
|
|
end
|
|
|
|
def matches?(request)
|
|
return false if @require_master && RailsMultisite::ConnectionManagement.current_db != "default"
|
|
provider = Discourse.current_user_provider.new(request.env)
|
|
provider.current_user &&
|
|
provider.current_user.admin? &&
|
|
custom_admin_check(request)
|
|
rescue Discourse::InvalidAccess, Discourse::ReadOnly
|
|
false
|
|
end
|
|
|
|
# Extensibility point: plugins can overwrite this to add additional checks
|
|
# if they require.
|
|
def custom_admin_check(request)
|
|
true
|
|
end
|
|
|
|
end
|