This commit is contained in:
@@ -217,8 +217,8 @@ async def update_shout(_, info, shout_id, shout_input=None, publish=False):
|
|||||||
if not shout:
|
if not shout:
|
||||||
return {'error': 'shout not found'}
|
return {'error': 'shout not found'}
|
||||||
if (
|
if (
|
||||||
shout.created_by is not author.id
|
shout.created_by != author.id
|
||||||
and author.id not in shout.authors
|
and not shout.authors.contains(author.id)
|
||||||
and 'editor' not in roles
|
and 'editor' not in roles
|
||||||
):
|
):
|
||||||
return {'error': 'access denied'}
|
return {'error': 'access denied'}
|
||||||
|
|||||||
Reference in New Issue
Block a user