Fix being able to report otherwise inaccessible statuses

2022-05-26 18:54:29 +02:00 · 2022-05-26 18:54:29 +02:00 · a3909514bf
parent 6c685f955a
commit a3909514bf
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/api/v1/reports_controller.rb
+++ b/app/controllers/api/v1/reports_controller.rb
@ -21,7 +21,7 @@ class Api::V1::ReportsController < Api::BaseController
  private

  def reported_status_ids
-    reported_account.statuses.with_discarded.find(status_ids).pluck(:id)
+    reported_account.statuses.with_discarded.permitted_for(reported_account, current_account).find(status_ids).pluck(:id)
  end

  def status_ids