changes to actionchecker perms levels for file uinlinks, and reverse check for board exist in form

merge-requests/208/head
fatchan 5 years ago
parent 883020cfe9
commit 04c784bc40
  1. 2
      controllers/forms/deleteboard.js
  2. 2
      helpers/checks/actionchecker.js

@ -28,7 +28,7 @@ module.exports = async (req, res, next) => {
} catch (err) {
return next(err);
}
if (board != null) {
if (!board) {
//global must check exists because the route skips Boards.exists middleware
errors.push(`Board /${req.body.uri}/ does not exist`);
}

@ -1,7 +1,7 @@
'use strict';
const actions = [
{name:'unlink_file', global:true, auth:3, passwords:true, build:true},
{name:'unlink_file', global:true, auth:4, passwords:true, build:true},
{name:'delete_file', global:true, auth:1, passwords:false, build:true},
{name:'spoiler', global:true, auth:4, passwords:true, build:true},
{name:'delete', global:true, auth:4, passwords:true, build:true},

Loading…
Cancel
Save