Avoid self moderating/unmoderating comments

openSUSE · Oct 2, 2023 · 86327d2 · 86327d2
1 parent 02b968d
commit 86327d2
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/api/app/policies/comment_policy.rb b/src/api/app/policies/comment_policy.rb
@@ -35,6 +35,7 @@ def reply?
   # Only logged-in Admins/Staff members or user with moderator role can moderate comments
   def moderate?
     return false if record.user.is_nobody? # soft-deleted comments
+    return false if user == record.user
     return true if user.try(:is_moderator?) || user.try(:is_admin?) || user.try(:is_staff?)
 
     false