Fixed 267U.pre2
This commit is contained in:
@@ -0,0 +1,68 @@
|
||||
import deleteNote from "../../../../services/note/delete.js";
|
||||
import { Users } from "../../../../models/index.js";
|
||||
import define from "../../define.js";
|
||||
import { getNote } from "../../common/getters.js";
|
||||
import { ApiError } from "../../error.js";
|
||||
import { SECOND, HOUR } from "../../../../const.js";
|
||||
import { getGroupActor } from "../../common/get-group-actor.js";
|
||||
export const meta = {
|
||||
tags: [
|
||||
"notes"
|
||||
],
|
||||
requireCredential: true,
|
||||
kind: "write:notes",
|
||||
limit: {
|
||||
duration: HOUR,
|
||||
max: 300,
|
||||
minInterval: SECOND
|
||||
},
|
||||
errors: {
|
||||
noSuchNote: {
|
||||
message: "No such note.",
|
||||
code: "NO_SUCH_NOTE",
|
||||
id: "490be23f-8c1f-4796-819f-94cb4f9d1630"
|
||||
},
|
||||
accessDenied: {
|
||||
message: "Access denied.",
|
||||
code: "ACCESS_DENIED",
|
||||
id: "fe8d7103-0ea8-4ec3-814d-f8b401dc69e9"
|
||||
},
|
||||
noSuchGroup: {
|
||||
message: "No such group.",
|
||||
code: "NO_SUCH_GROUP",
|
||||
id: "4dc5f42e-ae8b-4b9c-88df-4f3bc0d87a9a"
|
||||
}
|
||||
}
|
||||
};
|
||||
export const paramDef = {
|
||||
type: "object",
|
||||
properties: {
|
||||
noteId: {
|
||||
type: "string",
|
||||
format: "misskey:id"
|
||||
},
|
||||
groupId: {
|
||||
type: "string",
|
||||
format: "misskey:id",
|
||||
nullable: true
|
||||
}
|
||||
},
|
||||
required: [
|
||||
"noteId"
|
||||
]
|
||||
};
|
||||
export default define(meta, paramDef, async (ps, user)=>{
|
||||
const note = await getNote(ps.noteId, user).catch((err)=>{
|
||||
if (err.id === "9725d0ce-ba28-4dde-95a7-2cbb2c15de24") throw new ApiError(meta.errors.noSuchNote);
|
||||
throw err;
|
||||
});
|
||||
const group = await getGroupActor(ps.groupId, user);
|
||||
if (ps.groupId != null && group == null) throw new ApiError(meta.errors.noSuchGroup);
|
||||
if (!(user.isAdmin || user.isModerator) && (group == null ? note.userId !== user.id : note.groupId !== group.id)) {
|
||||
throw new ApiError(meta.errors.accessDenied);
|
||||
}
|
||||
// この操作を行うのが投稿者とは限らない(例えばモデレーター)ため
|
||||
await deleteNote(await Users.findOneByOrFail({
|
||||
id: note.userId
|
||||
}), note);
|
||||
});
|
||||
Reference in New Issue
Block a user