From 7225abddeefb569f1f2da739211d7797b63814a2 Mon Sep 17 00:00:00 2001 From: George Goldberg Date: Mon, 28 May 2018 14:46:52 +0100 Subject: MM-8814: Remove implicit permission grants from post ownership. (#8391) --- app/authorization.go | 13 ------------- 1 file changed, 13 deletions(-) (limited to 'app/authorization.go') diff --git a/app/authorization.go b/app/authorization.go index 57a38c199..3de50e27b 100644 --- a/app/authorization.go +++ b/app/authorization.go @@ -94,19 +94,6 @@ func (a *App) SessionHasPermissionToUser(session model.Session, userId string) b return false } -func (a *App) SessionHasPermissionToPost(session model.Session, postId string, permission *model.Permission) bool { - post, err := a.GetSinglePost(postId) - if err != nil { - return false - } - - if post.UserId == session.UserId { - return true - } - - return a.SessionHasPermissionToChannel(session, post.ChannelId, permission) -} - func (a *App) HasPermissionTo(askingUserId string, permission *model.Permission) bool { user, err := a.GetUser(askingUserId) if err != nil { -- cgit v1.2.3-1-g7c22