Fix account own circle only when post

This commit is contained in:
KMY 2023-08-22 06:46:17 +09:00
parent 3c43f84cdb
commit f20da7bf74

View file

@ -95,7 +95,7 @@ class PostStatusService < BaseService
return unless @options[:visibility] == 'circle' return unless @options[:visibility] == 'circle'
@circle = @options[:circle_id].present? && Circle.find(@options[:circle_id]) @circle = @options[:circle_id].present? && Circle.find(@options[:circle_id])
raise ArgumentError if @circle.nil? raise ArgumentError if @circle.nil? || @circle.account_id != @account.id
end end
def process_sensitive_words def process_sensitive_words