Skip to content

Commit f260f06

Browse files
committed
Restrict email only for current user
1 parent e83706b commit f260f06

File tree

1 file changed

+11
-2
lines changed

1 file changed

+11
-2
lines changed

lib/travis/api/v3/renderer/user.rb

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,14 +5,23 @@ class Renderer::User < Renderer::Owner
55
representation(:standard, :email, :is_syncing, :synced_at, :recently_signed_up, :secure_user_hash)
66
representation(:additional, :emails)
77

8+
def email
9+
@model.email if current_user?
10+
end
11+
812
def emails
9-
return @model.emails.map(&:email) if access_control.class == Travis::API::V3::AccessControl::LegacyToken && access_control.user.id == @model.id
10-
[]
13+
current_user? ? @model.emails.map(&:email) : []
1114
end
1215

1316
def secure_user_hash
1417
hmac_secret_key = Travis.config.intercom && Travis.config.intercom.hmac_secret_key.to_s
1518
OpenSSL::HMAC.hexdigest('sha256', hmac_secret_key, @model.id.to_s) if @model.id && hmac_secret_key
1619
end
20+
21+
private
22+
23+
def current_user?
24+
access_control.class == Travis::API::V3::AccessControl::LegacyToken && access_control.user.id == @model.id
25+
end
1726
end
1827
end

0 commit comments

Comments
 (0)