Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-05-07 18:56:57 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: #8508, dont allow moving topics if not moderator of target category

Browse Source
This commit is contained in:
Barış Soner Uşaklı
2020-07-16 16:47:49 -04:00
parent 1e14af4503
commit 3653151143
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/socket.io/topics/move.js
View File

@@ -13,6 +13,11 @@ module.exports = function (SocketTopics) {
throw new Error('[[error:invalid-data]]'); throw new Error('[[error:invalid-data]]');
} }
const canMove = await privileges.categories.isAdminOrMod(data.cid, socket.uid);
if (!canMove) {
throw new Error('[[error:no-privileges]]');
}
const uids = await user.getUidsFromSet('users:online', 0, -1); const uids = await user.getUidsFromSet('users:online', 0, -1);
await async.eachLimit(data.tids, 10, async function (tid) { await async.eachLimit(data.tids, 10, async function (tid) {