Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-30 10:35:55 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: #8971, disallow flags of privileged users (mods, gmods, admins)

Browse Source
This commit is contained in:
Julian Lam
2020-11-27 11:54:27 -05:00
parent dadb2527da
commit 1e7cf1cbc4
5 changed files with 39 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/privileges/posts.js
View File

@@ -176,12 +176,20 @@ module.exports = function (privileges) {
};
privileges.posts.canFlag = async function (pid, uid) {
const [userReputation, isAdminOrModerator] = await Promise.all([
const targetUid = await posts.getPostField(pid, 'uid');
const [userReputation, isAdminOrModerator, targetPrivileged, reporterPrivileged] = await Promise.all([
user.getUserField(uid, 'reputation'),
isAdminOrMod(pid, uid),
user.isPrivileged(targetUid),
user.isPrivileged(uid),
]);
const minimumReputation = meta.config['min:rep:flag'];
const canFlag = isAdminOrModerator || (userReputation >= minimumReputation);
let canFlag = isAdminOrModerator || (userReputation >= minimumReputation);
if (targetPrivileged && !reporterPrivileged) {
canFlag = false;
}
return { flag: canFlag };
};