From d99ba64206057ad3f314514bc95a42e2020fae97 Mon Sep 17 00:00:00 2001 From: Mario Date: Tue, 23 Jul 2024 13:11:24 +0000 Subject: =?UTF-8?q?make=20sure=20to=20fail=C3=83=20the=20tgroup=5Fcheck()?= =?UTF-8?q?=20for=20group=20posts=20if=20they=20do=20not=20have=20the=20po?= =?UTF-8?q?st=5Fwall=20permission.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- include/items.php | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) (limited to 'include') diff --git a/include/items.php b/include/items.php index dc9e9a7d9..d541bc8f8 100644 --- a/include/items.php +++ b/include/items.php @@ -2951,12 +2951,11 @@ function tgroup_check($uid, $item) { // post to group via DM if ($is_group) { - if (intval($item['item_private']) === 2 && $item['mid'] === $item['parent_mid']) { + if (intval($item['item_private']) === 2 && $item['mid'] === $item['parent_mid'] && perm_is_allowed($uid, $item['owner_xchan'], 'post_wall')) { return true; } } - // see if we already have this item. Maybe it is being updated. $r = q("select id from item where mid = '%s' and uid = %d limit 1", -- cgit v1.2.3