Update DirectMessageController, add parental controls support

1 year ago · fe30cd25d1
parent fd9b5ad443
commit fe30cd25d1
2 changed files with 867 additions and 837 deletions
--- a/app/Http/Controllers/Api/ApiV1Controller.php
+++ b/app/Http/Controllers/Api/ApiV1Controller.php
@ -2575,7 +2575,11 @@ class ApiV1Controller extends Controller

        $limit = $request->input('limit', 20);
        $scope = $request->input('scope', 'inbox');
-        $pid = $request->user()->profile_id;
+        $user = $request->user();
+        if($user->has_roles && !UserRoleService::can('can-direct-message', $user->id)) {
+            return [];
+        }
+        $pid = $user->profile_id;

        if(config('database.default') == 'pgsql') {
            $dms = DirectMessage::when($scope === 'inbox', function($q, $scope) use($pid) {
--- a/app/Http/Controllers/DirectMessageController.php
+++ b/app/Http/Controllers/DirectMessageController.php