From 36b5f6acfed95b6af5474e391d024d2e1eb968ac Mon Sep 17 00:00:00 2001
From: Alexandre Hannud Abdo <abdo@member.fsf.org>
Date: Fri, 17 Jul 2015 18:36:44 -0300
Subject: Require comment perms only for own posts, allow senders to deliver
 comments using stream perms.

---
 include/zot.php | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

(limited to 'include')

diff --git a/include/zot.php b/include/zot.php
index a677da808..b88bf72c3 100644
--- a/include/zot.php
+++ b/include/zot.php
@@ -1560,7 +1560,17 @@ function process_delivery($sender, $arr, $deliveries, $relay, $public = false, $
 
 		$tag_delivery = tgroup_check($channel['channel_id'],$arr);
 
-		$perm = (($arr['mid'] == $arr['parent_mid']) ? 'send_stream' : 'post_comments');
+		if ($arr['mid'] == $arr['parent_mid']){
+			$perm = 'send_stream';
+		}
+		else{
+			$r = q("select item_owner from item where item.mid == '%s' limit 1",
+				dbesc($arr['parent_mid']));
+			if($channel['channel_hash'] == $r[0]['item_owner'])
+				$perm = 'post_comments';
+			else
+				$perm = 'send_stream';
+		}
 
 
 		// This is our own post, possibly coming from a channel clone
-- 
cgit v1.2.3