fix: incorrect logic for post history editable bool

glombers · Oct 20, 2020 · a691be5 · a691be5
1 parent 205a103
commit a691be5
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/src/socket.io/posts/diffs.js b/src/socket.io/posts/diffs.js
@@ -18,8 +18,13 @@ module.exports = function (SocketPosts) {
 		let usernames = await user.getUsersFields(uids, ['username']);
 		usernames = usernames.map(userObj => (userObj.uid ? userObj.username : null));
 
-		const cid = await posts.getCidByPid(data.pid);
-		const canEdit = await privileges.categories.can('posts:edit', cid, socket.uid);
+		let canEdit = true;
+		try {
+			await user.isPrivilegedOrSelf(socket.uid, post.uid);
+		} catch (e) {
+			canEdit = false;
+		}
+
 		timestamps.push(post.timestamp);
 
 		return {