Comunic/comunicapiv3
1
0
Fork 0
mirror of https://gitlab.com/comunic/comunicapiv3 synced 2024-12-25 13:08:50 +00:00
Code Issues Projects Releases Wiki Activity

Fix incorrect access control check to delete posts

Browse Source
This commit is contained in:
Pierre HUBERT 2022-03-17 18:08:03 +01:00
parent fbeb66f70e
commit 68055712d9
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/controllers/posts_controller.rs
View File

@ -270,7 +270,7 @@ pub async fn update_content(r: &mut HttpRequestHandler) -> RequestResult {
/// Delete a post
pub async fn delete(r: &mut HttpRequestHandler) -> RequestResult {
let post = r.post_post_with_access("postID", PostAccessLevel::FULL_ACCESS)?;
let post = r.post_post_with_access("postID", PostAccessLevel::INTERMEDIATE_ACCESS)?;
posts_helper::delete(&post).await?;