-
Notifications
You must be signed in to change notification settings - Fork 515
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
AO3-6859 Fix admins being disallowed from tags pages #5001
base: master
Are you sure you want to change the base?
Conversation
There should not have been a restriction per role on the show action at all since it's not mentioned in the original Jira issue. So I think it would be best to simply remove the authorize call from the action and to adjust the tests accordingly. For |
I don't think this is the intended/correct behavior. d00f3de, the commit where the permission check for viewing tag-comments (
Done |
The linked commit is from before admins had roles so that comment is only about user roles. I double-checked, it's intended that all admins have access to comments on tags. Let's keep the scope of this PR to only the show action permissions and test and leave the rest as is. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you!
Issue
https://otwarchive.atlassian.net/browse/AO3-6859
Purpose
Only check auth if the tag is banned, so non-wrangler admin roles can view normal tags.
Drop comment that doesn't describe the action anymore.
Tweak check so wrangler tools are fully hidden for non-wrangler admins.
Fix test that was calling the wrong (?) action.
I'm not fully certain why the auth check was added to #show, so I'm assuming that it was meant to only apply to Banned tags.
Credit
Jake Faulkner