ryexandra 29037b4995 Security/fix permission bugs (#966) ... * secure the `EditPost` API endpoint * Check user is moderator in BanFromCommunity * secure the `EditComment` API endpoint * pass orig `read` prob when not explicitly updating it. * Block random users from adding mods. * use cleaner logic from `EditPost` * prevent editing a community by a mod from transfering ownership to them * secure `read` action in `EditPrivateMessage` * Add check in UserMention * only let the indended recipient mark as read * simplify booleans to satisfy clippy * requested changes + cargo +nightly fmt * fix to pass federation tests for deleting comments and posts Co-authored-by: chiminh <chiminh.tutanota.com> Co-authored-by: Hex Bear <buildadangtrain@protonmail.com>		2020-07-14 09:17:25 -04:00
..
lib.rs	Adding a community_name option to GetPosts /post/list . Fixes #800 (#942)	2020-07-13 09:50:13 -04:00
settings.rs	Security/fix permission bugs (#966)	2020-07-14 09:17:25 -04:00