fix: #9414, use posts:view_deleted

public/openapi/read/category/category_id.yaml

@@ -72,6 +72,8 @@ get:
                         type: boolean
                       read:
                         type: boolean
+                      posts:view_deleted:
+                        type: boolean
                       cid:
                         type: string
                       uid:

src/categories/topics.js

@@ -147,7 +147,7 @@ module.exports = function (Categories) {
 	};
 
 	Categories.modifyTopicsByPrivilege = function (topics, privileges) {
-		if (!Array.isArray(topics) || !topics.length || privileges.isAdminOrMod) {
+		if (!Array.isArray(topics) || !topics.length || privileges.view_deleted) {
 			return;
 		}
 

src/privileges/categories.js

@@ -78,7 +78,10 @@ privsCategories.list = async function (cid) {
 };
 
 privsCategories.get = async function (cid, uid) {
-	const privs = ['topics:create', 'topics:read', 'topics:tag', 'read'];
+	const privs = [
+		'topics:create', 'topics:read', 'topics:tag',
+		'read', 'posts:view_deleted',
+	];
 
 	const [userPrivileges, isAdministrator, isModerator] = await Promise.all([
 		helpers.isAllowedTo(privs, uid, cid),
@@ -95,7 +98,7 @@ privsCategories.get = async function (cid, uid) {
 		cid: cid,
 		uid: uid,
 		editable: isAdminOrMod,
-		view_deleted: isAdminOrMod,
+		view_deleted: isAdminOrMod || privData['posts:view_deleted'],
 		isAdminOrMod: isAdminOrMod,
 	});
 };

src/privileges/topics.js

@@ -49,7 +49,7 @@ privsTopics.get = async function (tid, uid) {
 		view_thread_tools: editable || deletable,
 		editable: editable,
 		deletable: deletable,
-		view_deleted: isAdminOrMod || isOwner,
+		view_deleted: isAdminOrMod || isOwner || privData['posts:view_deleted'],
 		isAdminOrMod: isAdminOrMod,
 		disabled: disabled,
 		tid: tid,