fix PATCH /api/v1/repos/{owner}/{repo}/issues/comments/{id}

(cherry picked from commit 51c280e877765efe721e607aa95bcbb5aef364e0)
This commit is contained in:
Loïc Dachary 2023-11-02 14:49:43 +01:00
parent 3d0bc983b4
commit e4683b8bb5
No known key found for this signature in database
GPG key ID: 992D23B392F9E4F2

View file

@ -594,7 +594,17 @@ func editIssueComment(ctx *context.APIContext, form api.EditIssueCommentOption)
return
}
if !ctx.IsSigned || (ctx.Doer.ID != comment.PosterID && !ctx.Repo.IsAdmin()) {
if err := comment.LoadIssue(ctx); err != nil {
ctx.Error(http.StatusInternalServerError, "LoadIssue", err)
return
}
if comment.Issue.RepoID != ctx.Repo.Repository.ID {
ctx.Status(http.StatusNotFound)
return
}
if !ctx.IsSigned || (ctx.Doer.ID != comment.PosterID && !ctx.Repo.CanWriteIssuesOrPulls(comment.Issue.IsPull)) {
ctx.Status(http.StatusForbidden)
return
}