Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-26 16:46:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: dont let mods load postqueue for a cid they are not a mod of

Browse Source
This commit is contained in:
Barış Soner Uşaklı
2020-10-04 22:10:24 -04:00
parent 2ea9768e00
commit 7bf6d3b8eb
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/controllers/mods.js
View File

@@ -213,7 +213,9 @@ modsController.postQueue = async function (req, res, next) {
categories.buildForSelect(req.uid, 'find', ['disabled', 'link', 'slug']), categories.buildForSelect(req.uid, 'find', ['disabled', 'link', 'slug']),
helpers.getCategoriesByStates(req.uid, cid, null, 'moderate'), helpers.getCategoriesByStates(req.uid, cid, null, 'moderate'),
]); ]);
if (!moderatedCids.includes(String(cid)) && !isAdminOrGlobalMod) {
return next();
}
allCategories.forEach((c) => { allCategories.forEach((c) => {
c.disabledClass = !isAdminOrGlobalMod && !moderatedCids.includes(String(c.cid)); c.disabledClass = !isAdminOrGlobalMod && !moderatedCids.includes(String(c.cid));
}); });