diff options
| author | Ivan Tashkinov <ivantashkinov@gmail.com> | 2018-12-06 10:26:17 +0300 |
|---|---|---|
| committer | Ivan Tashkinov <ivantashkinov@gmail.com> | 2018-12-06 10:26:17 +0300 |
| commit | 3e90f688f14310e92fe9343f2680c58d74f71cb6 (patch) | |
| tree | 3b43cc25ef81898830f7d74aafe6d85d945f4d4e /lib/pleroma/web/twitter_api/twitter_api_controller.ex | |
| parent | 3b5be09f4544ab1b3f6821fd4bbe047f94ef71ac (diff) | |
| download | pleroma-3e90f688f14310e92fe9343f2680c58d74f71cb6.tar.gz | |
[#210] Mastodon: actor storing for media uploads, ownership check to update_media.
Refactoring.
Diffstat (limited to 'lib/pleroma/web/twitter_api/twitter_api_controller.ex')
| -rw-r--r-- | lib/pleroma/web/twitter_api/twitter_api_controller.ex | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/pleroma/web/twitter_api/twitter_api_controller.ex b/lib/pleroma/web/twitter_api/twitter_api_controller.ex index 2f12131e7..c19ee230f 100644 --- a/lib/pleroma/web/twitter_api/twitter_api_controller.ex +++ b/lib/pleroma/web/twitter_api/twitter_api_controller.ex @@ -239,7 +239,7 @@ defmodule Pleroma.Web.TwitterAPI.Controller do !object -> {halt(conn), :not_found, ""} - object.data["actor"] != User.ap_id(user) -> + !Object.authorize_mutation(object, user) -> {halt(conn), :forbidden, "You can only update your own uploads."} !is_binary(description) -> |