MediaController: enforced owner-only access in :show action.
authorIvan Tashkinov <ivantashkinov@gmail.com>
Mon, 18 May 2020 06:51:53 +0000 (09:51 +0300)
committerIvan Tashkinov <ivantashkinov@gmail.com>
Mon, 18 May 2020 06:51:53 +0000 (09:51 +0300)
commit9b765652649f8b6110bd70aa90b148a90057ff6a
tree31243c6eea114706129b3e20598c9c05e1e8c6ba
parentaf9dfdce6b502d3a33db7a496879dda56719f56e
MediaController: enforced owner-only access in :show action.
Improved error response on denied access (now 403). Adjusted tests.
lib/pleroma/object.ex
lib/pleroma/web/mastodon_api/controllers/fallback_controller.ex
lib/pleroma/web/mastodon_api/controllers/media_controller.ex
test/web/mastodon_api/controllers/media_controller_test.exs