mirrors/lemmy
1
0
Fork 0
mirror of https://github.com/LemmyNet/lemmy.git synced 2024-06-02 09:02:43 +00:00
Code Issues Projects Releases Wiki Activity

Dont allow admin to add mod to remote community (#2129)

Browse source
This commit is contained in:
Nutomic 2022-03-14 18:35:57 +00:00 committed by GitHub
parent f8fb3b41f0
commit 550a93aed9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
crates/api/src/community.rs
View file

@ -335,6 +335,13 @@ impl Perform for AddModToCommunity {
// Verify that only mods or admins can add mod
is_mod_or_admin(context.pool(), local_user_view.person.id, community_id).await?;
let community = blocking(context.pool(), move |conn| {
Community::read(conn, community_id)
})
.await??;
if local_user_view.person.admin && !community.local {
return Err(LemmyError::from_message("not_a_moderator"));
}
// Update in local database
let community_moderator_form = CommunityModeratorForm {
@ -374,11 +381,7 @@ impl Perform for AddModToCommunity {
})
.await??
.into();
let community: ApubCommunity = blocking(context.pool(), move |conn| {
Community::read(conn, community_id)
})
.await??
.into();
let community: ApubCommunity = community.into();
if data.added {
AddMod::send(
&community,