Prevent users from being incorrectly able to delete their own discussions

This commit is contained in:
Toby Zerner 2016-03-18 09:39:41 +10:30
parent 087ab3fa1f
commit 3d49fc1315

View File

@ -109,6 +109,8 @@ class DiscussionPolicy extends AbstractPolicy
*/ */
public function delete(User $actor, Discussion $discussion) public function delete(User $actor, Discussion $discussion)
{ {
return $this->rename($actor, $discussion); if ($discussion->start_user_id == $actor->id && $discussion->participants_count <= 1) {
return true;
}
} }
} }