MediaController: enforced owner-only access in :show action.
Improved error response on denied access (now 403). Adjusted tests.
Showing
- lib/pleroma/object.ex 10 additions, 5 deletionslib/pleroma/object.ex
- lib/pleroma/web/mastodon_api/controllers/fallback_controller.ex 4 additions, 0 deletions...eroma/web/mastodon_api/controllers/fallback_controller.ex
- lib/pleroma/web/mastodon_api/controllers/media_controller.ex 4 additions, 4 deletionslib/pleroma/web/mastodon_api/controllers/media_controller.ex
- test/web/mastodon_api/controllers/media_controller_test.exs 15 additions, 5 deletionstest/web/mastodon_api/controllers/media_controller_test.exs
Loading
Please register or sign in to comment