Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-03-22 12:22:23 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: bug where privileges users could not uncrosspost others' crossposts. Tests

Browse Source
This commit is contained in:
Julian Lam
2025-12-29 14:20:25 -05:00
parent 6daaad810f
commit 0a0a7da9ba
2 changed files with 124 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/topics/crossposts.js
View File

@@ -2,6 +2,7 @@
const db = require('../database');
const topics = require('.');
const user = require('../user');
const categories = require('../categories');
const posts = require('../posts');
const activitypub = require('../activitypub');
@@ -87,8 +88,10 @@ Crossposts.add = async function (tid, cid, uid) {
Crossposts.remove = async function (tid, cid, uid) {
let crossposts = await Crossposts.get(tid);
const isPrivileged = await user.isAdminOrGlobalMod(uid);
const isMod = await user.isModerator(uid, cid);
const crosspostId = crossposts.reduce((id, { id: _id, cid: _cid, uid: _uid }) => {
if (String(cid) === String(_cid) && String(uid) === String(_uid)) {
if (String(cid) === String(_cid) && (isPrivileged || isMod || String(uid) === String(_uid))) {
id = _id;
}