AccountHeader: restrict privileged actions, fixes #713

This commit is contained in:
Alex Gleason 2022-01-03 11:10:58 -06:00
parent f596df3ec2
commit 67a9d014af
No known key found for this signature in database
GPG Key ID: 7211D1F99744FBB7
1 changed files with 2 additions and 2 deletions

View File

@ -356,7 +356,7 @@ class Header extends ImmutablePureComponent {
}); });
} }
if (account.get('id') !== me && isLocal(account)) { if (account.get('id') !== me && isLocal(account) && isAdmin(meAccount)) {
if (isAdmin(account)) { if (isAdmin(account)) {
menu.push({ menu.push({
text: intl.formatMessage(messages.demoteToModerator, { name: account.get('username') }), text: intl.formatMessage(messages.demoteToModerator, { name: account.get('username') }),
@ -407,7 +407,7 @@ class Header extends ImmutablePureComponent {
}); });
} }
if (features.suggestionsV2) { if (features.suggestionsV2 && isAdmin(meAccount)) {
if (account.getIn(['pleroma', 'is_suggested'])) { if (account.getIn(['pleroma', 'is_suggested'])) {
menu.push({ menu.push({
text: intl.formatMessage(messages.unsuggestUser, { name: account.get('username') }), text: intl.formatMessage(messages.unsuggestUser, { name: account.get('username') }),