We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 9ed2bcd commit a8eaa7aCopy full SHA for a8eaa7a
packages/slimkit-plus-feed/src/API2/FeedController.php
@@ -724,8 +724,7 @@ public function destroy(
724
FeedModel $feed
725
) {
726
$user = $request->user();
727
-
728
- if ($user->id !== $feed->user_id) {
+ if ($user->id !== $feed->user_id || ! $user->ability('[feed] Delete Feed')) {
729
return $response->json(['message' => '你没有权限删除动态'])->setStatusCode(403);
730
}
731
$feed->getConnection()->transaction(function () use ($feed, $user) {
0 commit comments