t/tetratto
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: don't allow users to read posts from communities with strict read

Browse source 
access
This commit is contained in:
trisua 2025-04-13 01:05:54 -04:00
parent 7b4865333e
commit 30b23660b6
5 changed files with 36 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

12
crates/app/src/routes/pages/communities.rs
View file

@ -551,6 +551,12 @@ pub async fn post_request(
// check permissions
let (can_read, can_manage_pins) = check_permissions!(community, jar, data, user);
if !can_read {
return Err(Html(
render_error(Error::NotAllowed, &jar, &data, &user).await,
));
}
// ...
let feed = match data.0.get_post_comments(post.id, 12, props.page).await {
Ok(p) => match data.0.fill_posts(p).await {
@ -736,6 +742,12 @@ pub async fn question_request(
// check permissions
let (can_read, _) = check_permissions!(community, jar, data, user);
if !can_read {
return Err(Html(
render_error(Error::NotAllowed, &jar, &data, &user).await,
));
}
// ...
let feed = match data
.0