Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-26 16:46:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: special handling for privsTopics.canPurge for remote posts

Browse Source
This commit is contained in:
Julian Lam
2024-05-10 12:13:36 -04:00
parent 9fbd48b152
commit b67a7c3c15
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/privileges/topics.js
View File

@@ -9,6 +9,7 @@ const user = require('../user');
const helpers = require('./helpers');
const categories = require('../categories');
const plugins = require('../plugins');
const activitypub = require('../activitypub');
const privsCategories = require('./categories');
const privsTopics = module.exports;
@@ -123,12 +124,18 @@ privsTopics.filterUids = async function (privilege, tid, uids) {
privsTopics.canPurge = async function (tid, uid) {
const cid = await topics.getTopicField(tid, 'cid');
const [purge, owner, isAdmin, isModerator] = await Promise.all([
let [purge, owner, isAdmin, isModerator] = await Promise.all([
privsCategories.isUserAllowedTo('purge', cid, uid),
topics.isOwner(tid, uid),
user.isAdministrator(uid),
user.isModerator(uid, cid),
]);
// Allow remote posts to purge themselves (as:Delete received)
if (activitypub.helpers.isUri(tid) && owner) {
purge = true;
}
return (purge && (owner || isModerator)) || isAdmin;
};