From: Eugen Rochko <eugen@zeonfederated.com>
Date: Fri, 18 Jan 2019 19:58:00 +0000 (+0100)
Subject: Fix REST API showing non-public reblogs for a given status (#9850)
X-Git-Url: https://git.xn--scling-oua.cat.family/?a=commitdiff_plain;h=32daecffefa5e633bf104ad4fac33621f6ea8201;p=mastodon.git

Fix REST API showing non-public reblogs for a given status (#9850)
---

diff --git a/app/controllers/api/v1/statuses/reblogged_by_accounts_controller.rb b/app/controllers/api/v1/statuses/reblogged_by_accounts_controller.rb
index 4315b0283..6851099f6 100644
--- a/app/controllers/api/v1/statuses/reblogged_by_accounts_controller.rb
+++ b/app/controllers/api/v1/statuses/reblogged_by_accounts_controller.rb
@@ -25,7 +25,7 @@ class Api::V1::Statuses::RebloggedByAccountsController < Api::BaseController
   end
 
   def paginated_statuses
-    Status.where(reblog_of_id: @status.id).paginate_by_max_id(
+    Status.where(reblog_of_id: @status.id).where(visibility: [:public, :unlisted]).paginate_by_max_id(
       limit_param(DEFAULT_ACCOUNTS_LIMIT),
       params[:max_id],
       params[:since_id]