From: hannes <h@nnesmannerhe.im>
Date: Sat, 27 Feb 2016 01:03:24 +0000 (+0000)
Subject: moderators can delete others' notices using the api
X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=6a0007c41012cb9a566415080c1fb5852ade90ae;p=quix0rs-gnu-social.git

moderators can delete others' notices using the api
---

diff --git a/actions/apistatusesdestroy.php b/actions/apistatusesdestroy.php
index 2d32124c42..f681ee8419 100644
--- a/actions/apistatusesdestroy.php
+++ b/actions/apistatusesdestroy.php
@@ -69,6 +69,7 @@ class ApiStatusesDestroyAction extends ApiAuthAction
         parent::prepare($args);
 
         $this->user = $this->auth_user;
+        $this->profile = $this->auth_user->getProfile();        
         $this->notice_id = (int)$this->trimmed('id');
 
         if (empty($notice_id)) {
@@ -122,7 +123,7 @@ class ApiStatusesDestroyAction extends ApiAuthAction
             return;
         }
 
-        if ($this->user->id == $this->notice->profile_id) {
+        if ($this->user->id == $this->notice->profile_id || $this->profile->hasRight(Right::DELETEOTHERSNOTICE)) {
             if (Event::handle('StartDeleteOwnNotice', array($this->user, $this->notice))) {
                 $this->notice->deleteAs($this->scoped);
                 Event::handle('EndDeleteOwnNotice', array($this->user, $this->notice));