From 7c9674de6c5cf0ea2c76a4e90d6e70ce1ad0129d Mon Sep 17 00:00:00 2001 From: gasoved Date: Tue, 2 Feb 2021 17:07:20 +0300 Subject: [PATCH] fix: include admins --- src/controllers/write/posts.js | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/src/controllers/write/posts.js b/src/controllers/write/posts.js index f61d33892a..c9c8d21104 100644 --- a/src/controllers/write/posts.js +++ b/src/controllers/write/posts.js @@ -101,9 +101,12 @@ Posts.deleteDiff = async (req, res) => { } const cid = await posts.getCidByPid(req.params.pid); - const isModerator = privileges.users.isModerator(cid, req.uid); + const [isAdmin, isModerator] = await Promise.all([ + privileges.users.isAdministrator(req.uid), + privileges.users.isModerator(req.uid, cid), + ]); - if (!isModerator) { + if (!(isAdmin || isModerator)) { return helpers.formatApiResponse(403, res, new Error('[[error:no-privileges]]')); }