closes #4838

9 years ago · 51a50448b8
parent fcf145fc81
commit 51a50448b8
1 changed files with 4 additions and 1 deletions
--- a/src/socket.io/helpers.js
+++ b/src/socket.io/helpers.js
@ -89,7 +89,10 @@ SocketHelpers.sendNotificationToPostOwner = function(pid, fromuid, command, noti
 		},
 		function (_postData, next) {
 			postData = _postData;
-			if (!postData.uid || fromuid === parseInt(postData.uid, 10)) {
+			privileges.posts.can('read', pid, postData.uid, next);
+		},
+		function (canRead, next) {
+			if (!canRead || !postData.uid || fromuid === parseInt(postData.uid, 10)) {
 				return;
 			}
 			async.parallel({