thepaperpilot/forgejo
1
0
Fork 0
Code Issues Pull requests Releases Activity Actions

fix DELETE /api/v1/repos/{owner}/{repo}/issues/comments/{id}

Browse source 
(cherry picked from commit 521eed2312f45bef7de28c9c03c04257862a453c)
This commit is contained in:
Loïc Dachary 2023-11-02 15:31:34 +01:00
parent 32c0d8ab9e
commit ff1151c95f
No known key found for this signature in database
GPG key ID: 992D23B392F9E4F2
1 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
routers/api/v1/repo/issue_comment.go
View file

@ -718,7 +718,17 @@ func deleteIssueComment(ctx *context.APIContext) {
return
}
if !ctx.IsSigned || (ctx.Doer.ID != comment.PosterID && !ctx.Repo.IsAdmin()) {
if err := comment.LoadIssue(ctx); err != nil {
ctx.Error(http.StatusInternalServerError, "LoadIssue", err)
return
}
if comment.Issue.RepoID != ctx.Repo.Repository.ID {
ctx.Status(http.StatusNotFound)
return
}
if !ctx.IsSigned || (ctx.Doer.ID != comment.PosterID && !ctx.Repo.CanWriteIssuesOrPulls(comment.Issue.IsPull)) {
ctx.Status(http.StatusForbidden)
return
} else if comment.Type != issues_model.CommentTypeComment {