Prevent users from being incorrectly able to delete their own discussions

This commit is contained in:
Toby Zerner 2016-03-18 09:39:41 +10:30
parent 3b19fe3a33
commit 476c1a5691

View File

@ -109,6 +109,8 @@ class DiscussionPolicy extends AbstractPolicy
*/
public function delete(User $actor, Discussion $discussion)
{
return $this->rename($actor, $discussion);
if ($discussion->start_user_id == $actor->id && $discussion->participants_count <= 1) {
return true;
}
}
}