mastodon/app/controllers/concerns/authorization.rb

24 lines
441 B
Ruby

# frozen_string_literal: true
module Authorization
extend ActiveSupport::Concern
include Pundit::Authorization
def pundit_user
current_account
end
def authorize(*)
super
rescue Pundit::NotAuthorizedError
raise Mastodon::NotPermittedError
end
def authorize_with(user, record, query)
Pundit.authorize(user, record, query)
rescue Pundit::NotAuthorizedError
raise Mastodon::NotPermittedError
end
end