diff options
| author | Ilja <ilja@ilja.space> | 2022-06-13 11:00:49 +0200 |
|---|---|---|
| committer | Ilja <ilja@ilja.space> | 2022-06-21 12:10:27 +0200 |
| commit | 7cf473c50076f31bb01bad92501a8c2353874b96 (patch) | |
| tree | 1eb7118ceaf749cc599f5297c2e469545249f4d3 /lib | |
| parent | 7adfc2e0f429f84eb7eb2712529e9a3486354d01 (diff) | |
| download | pleroma-7cf473c50076f31bb01bad92501a8c2353874b96.tar.gz pleroma-7cf473c50076f31bb01bad92501a8c2353874b96.zip | |
delete statusses is now privileged by :status_delete
Instead of superusers, you now need a role with privilige :status_delete to delete other users statusses
I also cleaned up some other stuff I saw
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/pleroma/web/common_api.ex | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/pleroma/web/common_api.ex b/lib/pleroma/web/common_api.ex index 1b95ee89c..ce1d5a7cc 100644 --- a/lib/pleroma/web/common_api.ex +++ b/lib/pleroma/web/common_api.ex @@ -144,7 +144,7 @@ defmodule Pleroma.Web.CommonAPI do {:find_activity, Activity.get_by_id(activity_id)}, {_, %Object{} = object, _} <- {:find_object, Object.normalize(activity, fetch: false), activity}, - true <- User.superuser?(user) || user.ap_id == object.data["actor"], + true <- User.privileged?(user, :status_delete) || user.ap_id == object.data["actor"], {:ok, delete_data, _} <- Builder.delete(user, object.data["id"]), {:ok, delete, _} <- Pipeline.common_pipeline(delete_data, local: true) do {:ok, delete} |