0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-04 10:39:43 +08:00
discourse/app/serializers/screened_email_serializer.rb
Sam 8801cb3c2f
FIX: Screened email list exposes IP addresses to moderators without IP-view permission (#39875)
Edge case where in an outlier case moderators can see ip addresses and
should not be allowed to
2026-05-11 14:47:17 +08:00

17 lines
366 B
Ruby
Vendored

# frozen_string_literal: true
class ScreenedEmailSerializer < ApplicationSerializer
attributes :email, :action, :match_count, :last_match_at, :created_at, :ip_address, :id
def action
ScreenedEmail.actions.key(object.action_type).to_s
end
def ip_address
object.ip_address.try(:to_s)
end
def include_ip_address?
scope.can_see_ip?
end
end