Deny write permissions for new unverified users

closes #1300 (closed)

Testing

This MR is for showing the blue email confirmation banner when a certain exception is thrown from the backend, which only applies to new registered users that haven't verified their emails.

First use an old user (older than the email confirmation task), and you should be able to do all of the following:

• Create a post
• Comment on a post
• Vote up or down
• Create group
• Create blog
• Upload images
• Upload movies

Second, create a new user, don't verify its email address, hide the blue email confirmation banner by clicking on the X icon and try to do the same. Each time you try to do any of those, the blue banner should re-appear

added 1 deleted label

changed the description

added 1 commit

• 334430f8 - (fix): updated spec tests for Votes\Manager

Compare with previous version

added StatusRequires Changes label and removed 1 deleted label

There are a bunch of places that acl write is being used. Lets not duplicate this call unless we have to.

What about subscribing and other interact acl actions?

resolved all threads

added 18 commits

• 334430f8...5c9218c9 - 10 commits from branch master
• d5dd61e8 - Merge remote-tracking branch 'upstream/master' into feat/unverified-users-permissions
• f67b0efa - (fix): remove acl check from Save as ElggEntity does it already
• dda6687c - (feat): ACL check for wires
• 256e99e1 - (fix): removed acl check from v1/media as it's already done in ElggEntity
• 407ab5a1 - (fix): remove acl->write check from Votes\Manager
• ee1fb98e - (fix): spec tests for SaveSpec
• fbf39026 - (fix): remove ACL->write check from Blogs\Manager as it's done in the entity
• c5ab2c9d - (feat): catch unverified users in comments

Compare with previous version

added 1 commit

• c58923ec - (fix): lint

Compare with previous version

resolved all threads

Much better @eiennohi . The lint changes are both necessary and a little confusing, but needed

I verified that being unverified blocks posting of activities, blogs and comments. However, we got an ugly error message in blogs

Everything else is blocking and looking good.

resolved all threads

added 27 commits

• c58923ec...fba354b0 - 26 commits from branch master
• efba7d9a - Merge remote-tracking branch 'upstream/master' into feat/unverified-users-permissions

Compare with previous version

Works.

approved this merge request

approved this merge request

merged

mentioned in commit 5b2bff6d