e621ng / e621ng

The locked tags input is shown on the uploader to users ranked moderator+

e621ng/app/views/uploads/new.html.erb

Line 41 in aedea61

allowLockedTags: <%= CurrentUser.is_moderator?.to_json %>,

But the parameter itself is only permitted for admin+

e621ng/app/controllers/uploads_controller.rb

Line 76 in aedea61

permitted_params << :locked_tags if CurrentUser.is_admin?

The presence of the locked tags input causes any attempted upload by a moderator (using the default form, at least) to fail with the message Error: found unpermitted parameter: :locked_tags.

However, moderators are able to lock tags on pre-existing posts.

e621ng/app/controllers/posts_controller.rb

Line 176 in aedea61

    
           permitted_params += %i[is_status_locked is_comment_disabled locked_tags] if CurrentUser.is_moderator?

`locked_tags` parameter inconsistency for moderators