oscar-surf/misskey
oscar-surf/misskey
0
0
Fork 0
Code Issues Activity

Resolve #2165

Browse source
This commit is contained in:
syuilo 2018-12-15 00:09:04 +09:00
parent 3ae42d9b85
commit ebceffba1e
No known key found for this signature in database
GPG key ID: BDC4C49D06AB9D69
3 changed files with 71 additions and 37 deletions
Download patch file Download diff file Expand all files Collapse all files

7
src/server/api/endpoints/drive/files/delete.ts
View file

@ -32,14 +32,17 @@ export default define(meta, (ps, user) => new Promise(async (res, rej) => {
// Fetch file
const file = await DriveFile
.findOne({
_id: ps.fileId,
'metadata.userId': user._id
_id: ps.fileId
});
if (file === null) {
return rej('file-not-found');
}
if (!user.isAdmin && !user.isModerator && !file.metadata.userId.equals(user._id)) {
return rej('access denied');
}
// Delete
await del(file);