Fix private post card handling.

2019-02-22 12:02:51 +01:00 · 2019-02-22 12:02:51 +01:00 · 62296f5a25
commit 62296f5a25
parent 5a4e2905fe
3 changed files with 15 additions and 3 deletions
--- a/lib/pleroma/web/mastodon_api/mastodon_api_controller.ex
+++ b/lib/pleroma/web/mastodon_api/mastodon_api_controller.ex
@ -1518,9 +1518,9 @@ defmodule Pleroma.Web.MastodonAPI.MastodonAPIController do
    end
  end

-  def status_card(conn, %{"id" => status_id}) do
+  def status_card(%{assigns: %{user: user}} = conn, %{"id" => status_id}) do
    with %Activity{} = activity <- Repo.get(Activity, status_id),
-         true <- ActivityPub.is_public?(activity) do
+         true <- ActivityPub.visible_for_user?(activity, user) do
      data =
        StatusView.render(
          "card.json",