Reaction is always visible to its owner, even if a detailed list of a…

…ll reactions is not visible.
MoeraOrg · Jul 13, 2022 · c1567db · c1567db
1 parent ca9d1d2
commit c1567db
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/src/main/java/org/moera/node/rest/CommentReactionController.java b/src/main/java/org/moera/node/rest/CommentReactionController.java
@@ -253,7 +253,7 @@ public ReactionInfo get(@PathVariable UUID postingId, @PathVariable UUID comment
         if (!comment.getPosting().getId().equals(postingId)) {
             throw new ObjectNotFoundFailure("comment.wrong-posting");
         }
-        if (!requestContext.isPrincipal(comment.getViewReactionsE())) {
+        if (!requestContext.isPrincipal(comment.getViewReactionsE()) && !requestContext.isClient(ownerName)) {
             return ReactionInfo.ofComment(commentId); // FIXME ugly, return 404
         }
 

diff --git a/src/main/java/org/moera/node/rest/PostingReactionController.java b/src/main/java/org/moera/node/rest/PostingReactionController.java
@@ -244,7 +244,7 @@ public ReactionInfo get(@PathVariable UUID postingId, @PathVariable String owner
         if (!requestContext.isPrincipal(posting.getViewE())) {
             throw new ObjectNotFoundFailure("posting.not-found");
         }
-        if (!requestContext.isPrincipal(posting.getViewReactionsE())) {
+        if (!requestContext.isPrincipal(posting.getViewReactionsE()) && !requestContext.isClient(ownerName)) {
             return ReactionInfo.ofPosting(postingId); // FIXME ugly, return 404
         }