Fixup website content deletion permissions

This commit is contained in:
Slendy 2022-12-19 17:32:37 -06:00
parent f4cad21061
commit 1b69f6a0e0
No known key found for this signature in database
GPG key ID: 7288D68361B91428
2 changed files with 4 additions and 6 deletions

View file

@ -42,9 +42,7 @@ public class ModerationRemovalController : ControllerBase
Score? score = await this.database.Scores.Include(s => s.Slot).FirstOrDefaultAsync(s => s.ScoreId == id);
if (score == null) return null;
if (!user.IsModerator && score.Slot.CreatorId != user.UserId) return null;
return score;
return user.IsModerator ? score : null;
});
}
@ -113,7 +111,7 @@ public class ModerationRemovalController : ControllerBase
Photo? photo = await this.database.Photos.Include(p => p.Slot).FirstOrDefaultAsync(p => p.PhotoId == id);
if (photo == null) return null;
if (!user.IsModerator && photo.Slot?.CreatorId != user.UserId) return null;
if (!user.IsModerator && photo.CreatorId != user.UserId) return null;
return photo;
});