1
0
mirror of https://github.com/flarum/core.git synced 2025-07-20 16:21:18 +02:00

Prevent users from being incorrectly able to delete their own discussions

This commit is contained in:
Toby Zerner
2016-03-18 09:39:41 +10:30
parent 087ab3fa1f
commit 3d49fc1315

View File

@@ -109,6 +109,8 @@ class DiscussionPolicy extends AbstractPolicy
*/
public function delete(User $actor, Discussion $discussion)
{
return $this->rename($actor, $discussion);
if ($discussion->start_user_id == $actor->id && $discussion->participants_count <= 1) {
return true;
}
}
}