t/tetratto
1
0
Fork 0
Code Issues Pull requests Projects Releases 8 Packages Wiki Activity Actions

add: private_mails bypass for MANAGE_USERS

Browse source
This commit is contained in:
trisua 2025-08-17 11:56:20 -04:00
parent 29f12dc24c
commit fdbc08912d
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
crates/app/src/routes/api/v1/letters.rs
View file

@ -3,7 +3,7 @@ use axum::{
response::IntoResponse,
Extension, Json,
};
use tetratto_core::model::{mail::Letter, oauth, ApiReturn, Error};
use tetratto_core::model::{mail::Letter, oauth, ApiReturn, Error, permissions::FinePermission};
use crate::{cookie::CookieJar, get_user_from_token, routes::pages::PaginatedQuery, State};
use super::CreateLetter;
@ -144,6 +144,7 @@ pub async fn create_request(
}
if other_user.settings.private_mails
&& !user.permissions.check(FinePermission::MANAGE_USERS)
&& data
.get_userfollow_by_initiator_receiver(other_user.id, user.id)
.await