Prevent admins and moderators eavesdropping in private and direct toots (#7067)

Fix #6986
7 years ago · b65eb00c53
parent b5726def55
commit b65eb00c53
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/admin/statuses_controller.rb
+++ b/app/controllers/admin/statuses_controller.rb
@ -12,7 +12,7 @@ module Admin
    def index
      authorize :status, :index?

-      @statuses = @account.statuses
+      @statuses = @account.statuses.where(visibility: [:public, :unlisted])

      if params[:media]
        account_media_status_ids = @account.media_attachments.attached.reorder(nil).select(:status_id).distinct