diff options
author | Mario <mario@mariovavti.com> | 2024-07-23 13:11:24 +0000 |
---|---|---|
committer | Mario <mario@mariovavti.com> | 2024-07-23 13:11:24 +0000 |
commit | d99ba64206057ad3f314514bc95a42e2020fae97 (patch) | |
tree | 0ea98378af4a5864c13088fb45b2b4c8726fffe4 /include | |
parent | ae140465d7861b9400b053afddaefc9b1b70d40b (diff) | |
download | volse-hubzilla-d99ba64206057ad3f314514bc95a42e2020fae97.tar.gz volse-hubzilla-d99ba64206057ad3f314514bc95a42e2020fae97.tar.bz2 volse-hubzilla-d99ba64206057ad3f314514bc95a42e2020fae97.zip |
make sure to failĂ the tgroup_check() for group posts if they do not have the post_wall permission.
Diffstat (limited to 'include')
-rw-r--r-- | include/items.php | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/include/items.php b/include/items.php index dc9e9a7d9..d541bc8f8 100644 --- a/include/items.php +++ b/include/items.php @@ -2951,12 +2951,11 @@ function tgroup_check($uid, $item) { // post to group via DM if ($is_group) { - if (intval($item['item_private']) === 2 && $item['mid'] === $item['parent_mid']) { + if (intval($item['item_private']) === 2 && $item['mid'] === $item['parent_mid'] && perm_is_allowed($uid, $item['owner_xchan'], 'post_wall')) { return true; } } - // see if we already have this item. Maybe it is being updated. $r = q("select id from item where mid = '%s' and uid = %d limit 1", |