From: Evan Prodromou <evan@status.net>
Date: Sat, 31 Dec 2011 17:09:07 +0000 (-0800)
Subject: don't show profile page of silenced users
X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=7bb59ad2a154c75949d856c84dced71b2fe59a20;p=quix0rs-gnu-social.git

don't show profile page of silenced users
---

diff --git a/actions/showstream.php b/actions/showstream.php
index a3b1794313..4a7d758380 100644
--- a/actions/showstream.php
+++ b/actions/showstream.php
@@ -63,6 +63,15 @@ class ShowstreamAction extends ProfileAction
 
         $p = Profile::current();
 
+        // Only the user him/herself, or someone with the power to unsilence,
+        // can view the page of a silenced user.
+
+        if (($this->profile->hasRole(Profile_role::SILENCED)) && 
+            (empty($p) || (($p->id != $this->profile->id) && (!$p->hasRight(Right::SILENCEUSER))))) {
+            throw new ServerException(sprintf(_("User %s has been silenced."), $this->profile->nickname),
+                                      403);
+        }
+
         if (empty($this->tag)) {
             $stream = new ProfileNoticeStream($this->profile, $p);
         } else {