AccountHeader: restrict privileged actions, fixes #713

This commit is contained in:
Alex Gleason 2022-01-03 11:10:58 -06:00
parent f596df3ec2
commit 67a9d014af
No known key found for this signature in database
GPG Key ID: 7211D1F99744FBB7
1 changed files with 2 additions and 2 deletions

View File

@ -356,7 +356,7 @@ class Header extends ImmutablePureComponent {
});
}
if (account.get('id') !== me && isLocal(account)) {
if (account.get('id') !== me && isLocal(account) && isAdmin(meAccount)) {
if (isAdmin(account)) {
menu.push({
text: intl.formatMessage(messages.demoteToModerator, { name: account.get('username') }),
@ -407,7 +407,7 @@ class Header extends ImmutablePureComponent {
});
}
if (features.suggestionsV2) {
if (features.suggestionsV2 && isAdmin(meAccount)) {
if (account.getIn(['pleroma', 'is_suggested'])) {
menu.push({
text: intl.formatMessage(messages.unsuggestUser, { name: account.get('username') }),