wassname/talk
1
0
Fork 0
mirror of https://github.com/wassname/talk.git synced 2026-09-12 13:01:11 +08:00
Code Issues Packages Projects Releases Wiki Activity

admins can still view all comment streams

Browse Source
This commit is contained in:
Riley Davis
2016-12-15 13:18:28 -07:00
parent f4ee28c618
commit 39fdd168fa
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
routes/api/comments/index.js
+2 -2
View File
@@ -24,8 +24,8 @@ router.get('/', (req, res, next) => {
return; return;
} }
// only return comment lists for the owner of the comments // if the user is not an admin, only return comment list for the owner of the comments
if (req.user.id !== user_id) { if (req.user.id !== user_id && !authorization.has(req.user, 'admin')) {
next(authorization.ErrNotAuthorized); next(authorization.ErrNotAuthorized);
return; return;
} }