diff options
| author | Christopher Speller <crspeller@gmail.com> | 2015-09-30 11:30:11 -0400 |
|---|---|---|
| committer | Christopher Speller <crspeller@gmail.com> | 2015-09-30 14:26:37 -0400 |
| commit | 7d31f3a271d933b8c276602d9fb77fd5d22055de (patch) | |
| tree | b836506cc084e1907e39ca0d7283a4175a25ba50 /api/post.go | |
| parent | 89b77cc72ffd9dec6242f66277a4aeffe6fb737b (diff) | |
| download | chat-7d31f3a271d933b8c276602d9fb77fd5d22055de.tar.gz chat-7d31f3a271d933b8c276602d9fb77fd5d22055de.tar.bz2 chat-7d31f3a271d933b8c276602d9fb77fd5d22055de.zip | |
Fixing some locations to use the IsTeamAdmin function which properly checks for system admin permissions.
Diffstat (limited to 'api/post.go')
| -rw-r--r-- | api/post.go | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/api/post.go b/api/post.go index 0379f6af5..2b683fb7d 100644 --- a/api/post.go +++ b/api/post.go @@ -633,7 +633,7 @@ func deletePost(c *Context, w http.ResponseWriter, r *http.Request) { post := result.Data.(*model.PostList).Posts[postId] - if !c.HasPermissionsToChannel(cchan, "deletePost") && !c.IsTeamAdmin(post.UserId) { + if !c.HasPermissionsToChannel(cchan, "deletePost") && !c.IsTeamAdmin() { return } @@ -648,7 +648,7 @@ func deletePost(c *Context, w http.ResponseWriter, r *http.Request) { return } - if post.UserId != c.Session.UserId && !model.IsInRole(c.Session.Roles, model.ROLE_TEAM_ADMIN) { + if post.UserId != c.Session.UserId && !c.IsTeamAdmin() { c.Err = model.NewAppError("deletePost", "You do not have the appropriate permissions", "") c.Err.StatusCode = http.StatusForbidden return |