grishka/lemmy
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Don't allow deleted users to do actions. Fixes #1656 (#1704)

Browse source
This commit is contained in:
Dessalines 2021-08-16 16:51:08 -04:00 committed by GitHub
parent 32874163a8
commit 2966203653
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
crates/api_common/src/lib.rs
View file

@ -272,6 +272,11 @@ pub async fn get_local_user_view_from_jwt(
return Err(ApiError::err("site_ban").into());
}
// Check for user deletion
if local_user_view.person.deleted {
return Err(ApiError::err("deleted").into());
}
check_validator_time(&local_user_view.local_user.validator_time, &claims)?;
Ok(local_user_view)