lemmy/server
ryexandra 29037b4995
Security/fix permission bugs (#966)
* secure the `EditPost` API endpoint

* Check user is moderator in BanFromCommunity

* secure the `EditComment` API endpoint

* pass orig `read` prob when not explicitly updating it.

* Block random users from adding mods.

* use cleaner logic from `EditPost`

* prevent editing a community by a mod from transfering ownership to them

* secure `read` action in `EditPrivateMessage`

* Add check in UserMention

* only let the indended recipient mark as read

* simplify booleans to satisfy clippy

* requested changes + cargo +nightly fmt

* fix to pass federation tests for deleting comments and posts

Co-authored-by: chiminh <chiminh.tutanota.com>
Co-authored-by: Hex Bear <buildadangtrain@protonmail.com>
2020-07-14 09:17:25 -04:00
..
config Merge branch 'master' into federation 2020-06-27 10:54:08 -04:00
lemmy_db Security/fix permission bugs (#966) 2020-07-14 09:17:25 -04:00
lemmy_utils Security/fix permission bugs (#966) 2020-07-14 09:17:25 -04:00
migrations Migration fix 2020-07-12 20:27:21 +02:00
migrations_testing/2020-01-13-025151_create_materialized_views A first pass at using materialized views. 2020-01-13 20:02:02 -05:00
query_testing Remove materialized views. (#908) 2020-07-07 10:54:44 -04:00
src Security/fix permission bugs (#966) 2020-07-14 09:17:25 -04:00
.gitignore A first pass at using materialized views. 2020-01-13 20:02:02 -05:00
.rustfmt.toml Rework imports 2020-05-16 20:04:17 +02:00
Cargo.lock Wrap each inbox route individually (#954) 2020-07-13 09:55:55 -04:00
Cargo.toml Wrap each inbox route individually (#954) 2020-07-13 09:55:55 -04:00
clean.sh Adding cargo outdated to clean script. 2020-01-03 23:39:31 -05:00
db-init.sh Split code into cargo workspaces (#67) 2020-07-10 18:15:41 +00:00
diesel.toml Split code into cargo workspaces (#67) 2020-07-10 18:15:41 +00:00
test.sh Fixing travis, adding a test.sh script. 2020-07-10 14:16:42 -04:00