fix(server): delete another users channel
Since the channel owner isn't necessary the auth user we need to check the right account whether it's the last video or not.
This commit is contained in:
parent
952881aaf6
commit
416a7f4f35
1 changed files with 3 additions and 3 deletions
|
@ -80,7 +80,7 @@ const videoChannelsRemoveValidator = [
|
|||
if (!await doesVideoChannelNameWithHostExist(req.params.nameWithHost, res)) return
|
||||
|
||||
if (!checkUserCanDeleteVideoChannel(res.locals.oauth.token.User, res.locals.videoChannel, res)) return
|
||||
if (!await checkVideoChannelIsNotTheLastOne(res)) return
|
||||
if (!await checkVideoChannelIsNotTheLastOne(res.locals.videoChannel, res)) return
|
||||
|
||||
return next()
|
||||
}
|
||||
|
@ -174,8 +174,8 @@ function checkUserCanDeleteVideoChannel (user: MUser, videoChannel: MChannelAcco
|
|||
return true
|
||||
}
|
||||
|
||||
async function checkVideoChannelIsNotTheLastOne (res: express.Response) {
|
||||
const count = await VideoChannelModel.countByAccount(res.locals.oauth.token.User.Account.id)
|
||||
async function checkVideoChannelIsNotTheLastOne (videoChannel: MChannelAccountDefault, res: express.Response) {
|
||||
const count = await VideoChannelModel.countByAccount(videoChannel.Account.id)
|
||||
|
||||
if (count <= 1) {
|
||||
res.fail({
|
||||
|
|
Loading…
Add table
Reference in a new issue