From f63701a086e6520a04d35debc2bea6a5f9a2d623 Mon Sep 17 00:00:00 2001 From: ilya-bkv Date: Tue, 17 Jan 2023 11:54:05 +0300 Subject: [PATCH] [hotfix] delete reaction --- resolvers/zine/reactions.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/resolvers/zine/reactions.py b/resolvers/zine/reactions.py index 2b004578..d6a36253 100644 --- a/resolvers/zine/reactions.py +++ b/resolvers/zine/reactions.py @@ -198,11 +198,10 @@ async def delete_reaction(_, info, reaction=None): auth: AuthCredentials = info.context["request"].auth with local_session() as session: - user = session.query(User).where(User.id == auth.user_id).first() r = session.query(Reaction).filter(Reaction.id == reaction).first() if not r: return {"error": "invalid reaction id"} - if r.createdBy != user.slug: + if r.createdBy != auth.user_id: return {"error": "access denied"} r.deletedAt = datetime.now(tz=timezone.utc) session.commit()