Don't report the PD flag in the user API call

diff --git a/app/views/user/api_read.builder b/app/views/user/api_read.builder
index d25ff9f64046b2b84cd22629ff2dffbcde36a9a6..db7bcc2b7bf98953f2326d9f810db6f5a552ee1a 100644 (file)
--- a/app/views/user/api_read.builder
+++ b/app/views/user/api_read.builder
@@ -6,9 +6,12 @@ xml.osm("version" => API_VERSION, "generator" => GENERATOR) do
     if @this_user.description
       xml.tag! "description", @this_user.description
     end
-    xml.tag! "contributor-terms",
-        :agreed => !!@this_user.terms_agreed,
-        :pd => !!@this_user.consider_pd
+    if @user && @user == @this_user
+      xml.tag! "contributor-terms", :agreed => !!@this_user.terms_agreed,
+                                    :pd => !!@this_user.consider_pd
+    else
+      xml.tag! "contributor-terms", :agreed => !!@this_user.terms_agreed
+    end
     if @this_user.image.file?
       xml.tag! "img", :href => "http://#{SERVER_URL}#{@this_user.image.url}"
     end

diff --git a/test/functional/user_controller_test.rb b/test/functional/user_controller_test.rb
index afff1b2a848ff5ea6f69f8397eb06219ff0bbb88..606924b35d288fe12af91d31ead2aab2deaae0db 100644 (file)
--- a/test/functional/user_controller_test.rb
+++ b/test/functional/user_controller_test.rb
@@ -531,6 +531,7 @@ class UserControllerTest < ActionController::TestCase
     assert_response :success
 
     # check that we aren't revealing private information
+    assert_select "contributor-terms[pd]", false
     assert_select "home", false
     assert_select "languages", false