FIX delete message permission

5 years ago · 029aac3554
parent 8d6ddd2938
commit 029aac3554
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/messages_controller.rb
+++ b/app/controllers/messages_controller.rb
@ -128,7 +128,7 @@ class MessagesController < ApplicationController

  def destroy
    begin
-      return normal_status(403, "您没有权限进行该操作") unless @message.author == current_user || current_user.teacher_of_course?(@message.board.course)
+      return normal_status(403, "您没有权限进行该操作") if current_user.course_identity(@message.board.course) >= 5 || @message.author != current_user
      @message.destroy!
    rescue Exception => e
      uid_logger_error(e.message)