From cb84cb1c0f376d38566096b300ec6a09fecdb337 Mon Sep 17 00:00:00 2001 From: epriestley Date: Fri, 22 Mar 2013 14:39:43 -0700 Subject: [PATCH] Don't require admin privileges to verify email addresses Summary: Fixes T2821. In D5386 we locked most of this app down, but missed one controller which needs to be accessible by non-admins (this controller should probably be in some other app, like auth, in the long term). Test Plan: @shanemhansen confirmed this fixed his install Reviewers: chad, AnhNhan Reviewed By: chad CC: shanemhansen, aran Maniphest Tasks: T2821 Differential Revision: https://secure.phabricator.com/D5422 --- .../controller/PhabricatorEmailVerificationController.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/applications/people/controller/PhabricatorEmailVerificationController.php b/src/applications/people/controller/PhabricatorEmailVerificationController.php index 84f4aa33fc..ccc2fca281 100644 --- a/src/applications/people/controller/PhabricatorEmailVerificationController.php +++ b/src/applications/people/controller/PhabricatorEmailVerificationController.php @@ -9,6 +9,10 @@ final class PhabricatorEmailVerificationController $this->code = $data['code']; } + public function shouldRequireAdmin() { + return false; + } + public function shouldRequireEmailVerification() { // Since users need to be able to hit this endpoint in order to verify // email, we can't ever require email verification here.