From 09150a4dbb74e9fb0d9fe4bdc5ced3ac246cd0e9 Mon Sep 17 00:00:00 2001 From: rubenwardy Date: Tue, 25 Dec 2018 17:51:29 +0000 Subject: Allow users to discard their own topics --- app/views/api.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'app/views') diff --git a/app/views/api.py b/app/views/api.py index 04f58d6..0c1fc0e 100644 --- a/app/views/api.py +++ b/app/views/api.py @@ -46,7 +46,7 @@ def api_topics_page(): @app.route("/api/topic_discard/", methods=["POST"]) -@rank_required(UserRank.EDITOR) +@login_required def topic_set_discard(): tid = request.args.get("tid") discard = request.args.get("discard") @@ -54,6 +54,9 @@ def topic_set_discard(): abort(400) topic = ForumTopic.query.get(tid) + if not topic.checkPerm(current_user, Permission.TOPIC_DISCARD): + abort(403) + topic.discarded = discard == "true" db.session.commit() -- cgit v1.2.3