wassname/talk
1
0
Fork 0
mirror of https://github.com/wassname/talk.git synced 2026-07-09 14:33:08 +08:00
Code Issues Packages Projects Releases Wiki Activity

Disallow querying for all comments unpriviledgly

Browse Source
This commit is contained in:
Chi Vinh Le
2017-09-20 04:35:14 +07:00
parent c3e24a0451
commit 2d96163b76
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
graph/loaders/comments.js
+2 -2
View File
@@ -94,7 +94,7 @@ const getCommentCountByQuery = (context, {ids, statuses, asset_id, parent_id, au
// If user queries for statuses other than NONE and/or ACCEPTED statuses, it needs
// special priviledges.
if (
statuses && statuses.some((status) => !['NONE', 'ACCEPTED'].includes(status)) &&
!statuses || statuses.some((status) => !['NONE', 'ACCEPTED'].includes(status)) &&
(context.user == null || !context.user.can(SEARCH_NON_NULL_OR_ACCEPTED_COMMENTS))
) {
return null;
@@ -291,7 +291,7 @@ const getCommentsByQuery = async (ctx, {ids, statuses, asset_id, parent_id, auth
// If user queries for statuses other than NONE and/or ACCEPTED statuses, it needs
// special priviledges.
if (
statuses && statuses.some((status) => !['NONE', 'ACCEPTED'].includes(status)) &&
!statuses || statuses.some((status) => !['NONE', 'ACCEPTED'].includes(status)) &&
(ctx.user == null || !ctx.user.can(SEARCH_NON_NULL_OR_ACCEPTED_COMMENTS))
) {
return null;