From 0a1ad87d6455f0fd18eb187ffb1d770b675912e4 Mon Sep 17 00:00:00 2001 From: Julian Lam Date: Fri, 10 May 2024 12:32:21 -0400 Subject: [PATCH] fix: Topic.isOwner check to handle remote users --- src/topics/user.js | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/topics/user.js b/src/topics/user.js index d3fbdc91ef..7a2265512c 100644 --- a/src/topics/user.js +++ b/src/topics/user.js @@ -1,15 +1,15 @@ 'use strict'; const db = require('../database'); +const utils = require('../utils'); module.exports = function (Topics) { Topics.isOwner = async function (tid, uid) { - uid = parseInt(uid, 10); - if (uid <= 0) { + if (utils.isNumber(uid) && parseInt(uid, 10) <= 0) { return false; } const author = await Topics.getTopicField(tid, 'uid'); - return author === uid; + return String(author) === String(uid); }; Topics.getUids = async function (tid) {