From 36b5f6acfed95b6af5474e391d024d2e1eb968ac Mon Sep 17 00:00:00 2001 From: Alexandre Hannud Abdo Date: Fri, 17 Jul 2015 18:36:44 -0300 Subject: Require comment perms only for own posts, allow senders to deliver comments using stream perms. --- include/zot.php | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) (limited to 'include/zot.php') diff --git a/include/zot.php b/include/zot.php index a677da808..b88bf72c3 100644 --- a/include/zot.php +++ b/include/zot.php @@ -1560,7 +1560,17 @@ function process_delivery($sender, $arr, $deliveries, $relay, $public = false, $ $tag_delivery = tgroup_check($channel['channel_id'],$arr); - $perm = (($arr['mid'] == $arr['parent_mid']) ? 'send_stream' : 'post_comments'); + if ($arr['mid'] == $arr['parent_mid']){ + $perm = 'send_stream'; + } + else{ + $r = q("select item_owner from item where item.mid == '%s' limit 1", + dbesc($arr['parent_mid'])); + if($channel['channel_hash'] == $r[0]['item_owner']) + $perm = 'post_comments'; + else + $perm = 'send_stream'; + } // This is our own post, possibly coming from a channel clone -- cgit v1.2.3