]> git.openstreetmap.org Git - rails.git/commit
Check user instead of scope when getting note author info
authorAnton Khorev <tony29@yandex.ru>
Sat, 15 Feb 2025 00:34:53 +0000 (03:34 +0300)
committerAnton Khorev <tony29@yandex.ru>
Sat, 15 Feb 2025 00:45:53 +0000 (03:45 +0300)
commit037bafcd1ca8494f25ded9fbad422c41f349889c
tree418deb67a5efa9af3e5a604972934b1cec88eade
parentf5af8befa9ffe0c95f4a3c58d2fbb63a2e971ab0
Check user instead of scope when getting note author info

Previously it was possible to create a note while authorized but having no write_notes scope. Currently it's not possible.
app/controllers/api/notes_controller.rb