From e7e16318d056dbd9ec272085487cce6039627b09 Mon Sep 17 00:00:00 2001
From: elijah <elijah@riseup.net>
Date: Sun, 31 Jan 2016 14:43:19 -0800
Subject: remove cert fingerprints for disabled users, so that they cannot send
 email anymore. closes #7690

---
 app/controllers/v1/smtp_certs_controller.rb | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'app/controllers/v1/smtp_certs_controller.rb')

diff --git a/app/controllers/v1/smtp_certs_controller.rb b/app/controllers/v1/smtp_certs_controller.rb
index 75f524c..5760645 100644
--- a/app/controllers/v1/smtp_certs_controller.rb
+++ b/app/controllers/v1/smtp_certs_controller.rb
@@ -3,6 +3,7 @@ class V1::SmtpCertsController < ApiController
   before_filter :require_login
   before_filter :require_email_account
   before_filter :fetch_identity
+  before_filter :require_enabled
 
   # POST /1/smtp_cert
   def create
@@ -22,6 +23,10 @@ class V1::SmtpCertsController < ApiController
     access_denied unless service_level.provides? 'email'
   end
 
+  def require_enabled
+    access_denied unless current_user.enabled?
+  end
+
   def fetch_identity
     @identity = current_user.identity
   end
-- 
cgit v1.2.3