权限判断

5 years ago · 78feda4231
parent df04e495d2
commit 78feda4231
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/users/videos_controller.rb
+++ b/app/controllers/users/videos_controller.rb
@ -55,7 +55,7 @@ class Users::VideosController < Users::BaseController

  def destroy
    video = Video.find_by(id: params[:id])
-    render_forbidden unless video.user_id != observed_user.id  || !current_user.admin_or_business?
+    return render_forbidden unless video.user_id == current_user.id  || current_user.admin_or_business?
    return render_not_found if video.blank?
    return render_error('该状态下不能删除视频') unless video.pending?