Change: 時限投稿はフォロワー以外にはActivityを発行しない

app/controllers/statuses_controller.rb

@@ -65,7 +65,7 @@ class StatusesController < ApplicationController
     if request.authorization.present? && request.authorization.match(/^Bearer /i)
       raise Mastodon::NotPermittedError unless @status.capability_tokens.find_by(token: request.authorization.gsub(/^Bearer /i, ''))
     else
-      authorize @status, :show?
+      authorize @status, request.format == :json ? :show_activity? : :show?
     end
   rescue Mastodon::NotPermittedError
     not_found

app/policies/status_policy.rb

@@ -28,6 +28,13 @@ class StatusPolicy < ApplicationPolicy
     owned?
   end
 
+  def show_activity?
+    return false unless show?
+    return true if record.scheduled_expiration_status.blank?
+
+    following_author?
+  end
+
   def reblog?
     !requires_mention? && (!private? || owned?) && show? && !blocking_author?
   end