Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-26 08:36:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: #10584, dont show backlinks if you dont have read privilege

Browse Source
This commit is contained in:
Barış Soner Uşaklı
2022-05-06 14:01:08 -04:00
parent 1928a18617
commit 5e7d366f55
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/topics/events.js
View File

@@ -8,6 +8,7 @@ const posts = require('../posts');
const categories = require('../categories');
const plugins = require('../plugins');
const translator = require('../translator');
const privileges = require('../privileges');
const Events = module.exports;
@@ -130,6 +131,14 @@ async function modifyEvent({ tid, uid, eventIds, timestamps, events }) {
// Remove backlink events if backlinks are disabled
if (meta.config.topicBacklinks !== 1) {
events = events.filter(event => event.type !== 'backlink');
} else {
// remove backlinks that we dont have read permission
const backlinkPids = events.filter(e => e.type === 'backlink')
.map(e => e.href.split('/').pop());
const pids = await privileges.posts.filter('topics:read', backlinkPids, uid);
events = events.filter(
e => e.type !== 'backlink' || pids.includes(e.href.split('/').pop())
);
}
// Remove events whose types no longer exist (e.g. plugin uninstalled)