From 04c784bc40596d7366ab17b6aa559723ac70b701 Mon Sep 17 00:00:00 2001 From: fatchan Date: Tue, 13 Aug 2019 19:14:41 +0000 Subject: [PATCH] changes to actionchecker perms levels for file uinlinks, and reverse check for board exist in form --- controllers/forms/deleteboard.js | 2 +- helpers/checks/actionchecker.js | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/controllers/forms/deleteboard.js b/controllers/forms/deleteboard.js index 90c9c187..947b7a44 100644 --- a/controllers/forms/deleteboard.js +++ b/controllers/forms/deleteboard.js @@ -28,7 +28,7 @@ module.exports = async (req, res, next) => { } catch (err) { return next(err); } - if (board != null) { + if (!board) { //global must check exists because the route skips Boards.exists middleware errors.push(`Board /${req.body.uri}/ does not exist`); } diff --git a/helpers/checks/actionchecker.js b/helpers/checks/actionchecker.js index 45c9520c..87fe5400 100644 --- a/helpers/checks/actionchecker.js +++ b/helpers/checks/actionchecker.js @@ -1,7 +1,7 @@ 'use strict'; const actions = [ - {name:'unlink_file', global:true, auth:3, passwords:true, build:true}, + {name:'unlink_file', global:true, auth:4, passwords:true, build:true}, {name:'delete_file', global:true, auth:1, passwords:false, build:true}, {name:'spoiler', global:true, auth:4, passwords:true, build:true}, {name:'delete', global:true, auth:4, passwords:true, build:true},