Hide user votes if actor do not have permissions to see voters - Githubissues

FriendsOfFlarum / gamification

Add upvotes, downvotes, and ranks to your Flarum Community

https://discuss.flarum.org/d/20671-friendsofflarum-gamification

MIT License

36 stars 17 forks source link

Hide user votes if actor do not have permissions to see voters #102

Open rob006 opened 1 year ago

rob006 commented 1 year ago

This was originally reported in https://github.com/FriendsOfFlarum/gamification/pull/85#issuecomment-1209824265

Voters are also leaking on user profile - you can see posts user voted on even if you don't have permissions to see voters.

For example only me and people with canSeeVoters should see my votes on https://discuss.flarum.org/u/rob006/votes

Confirmed

[ ] Frontend changes: tested on a local Flarum installation.
[ ] Backend changes: tests are green (run composer test).