Only allow distinguishing own comments (fixes #4216) (#4222)

activity-duplicate-context
Nutomic 2023-12-01 15:16:22 +01:00 committed by GitHub
parent 70003407a7
commit 809fc05cb3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 0 deletions

View File

@ -26,6 +26,11 @@ pub async fn distinguish_comment(
) )
.await?; .await?;
// Verify that only the creator can distinguish
if local_user_view.person.id != orig_comment.creator.id {
Err(LemmyErrorType::NoCommentEditAllowed)?
}
// Verify that only a mod or admin can distinguish a comment // Verify that only a mod or admin can distinguish a comment
check_community_mod_action( check_community_mod_action(
&local_user_view.person, &local_user_view.person,