From 83681dfe050ce2ae74d5d1ca451d495d48f029ba Mon Sep 17 00:00:00 2001 From: jessib Date: Mon, 12 Aug 2013 12:00:11 -0700 Subject: Per ISEC informational issue, manually set the private property only in cases where it is an admin who set it. --- help/app/models/ticket_comment.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'help/app/models/ticket_comment.rb') diff --git a/help/app/models/ticket_comment.rb b/help/app/models/ticket_comment.rb index 1df7eec..13bea2b 100644 --- a/help/app/models/ticket_comment.rb +++ b/help/app/models/ticket_comment.rb @@ -7,7 +7,7 @@ class TicketComment property :posted_at, Time#, :protected => true #property :posted_verified, TrueClass, :protected => true #should be true if current_user is set when the comment is created property :body, String - property :private, TrueClass # private comments are only viewable by admins + property :private, TrueClass # private comments are only viewable by admins #this is checked when set, to make sure it was set by an admin # ? timestamps! validates :body, :presence => true -- cgit v1.2.3