fixes for post privileges

This commit is contained in:
Baris Soner Usakli
2014-01-19 17:28:08 -05:00
parent 1980e945da
commit 189e69284e
6 changed files with 44 additions and 14 deletions

View File

@@ -170,7 +170,17 @@ SocketTopics.movePost = function(socket, data, callback) {
return callback(new Error('invalid data'));
}
topics.movePostToTopic(data.pid, data.tid, callback);
threadTools.privileges(data.tid, socket.uid, function(err, privileges) {
if(err) {
return callback(err);
}
if(!(privileges.admin || privileges.moderator)) {
return callback(new Error('not allowed'));
}
topics.movePostToTopic(data.pid, data.tid, callback);
});
};
SocketTopics.move = function(socket, data, callback) {