Refactor transmogrifier Delete to avoid spoofed Delete being accepted

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2021-11-14 16:26:51 +01:00
parent 2e869c1ade
commit df2c184bc0
2 changed files with 20 additions and 33 deletions
--- a/lib/federation/activity_pub/permission.ex
+++ b/lib/federation/activity_pub/permission.ex
@@ -101,7 +101,8 @@ defmodule Mobilizon.Federation.ActivityPub.Permission do
          false
      end
    else
-      true
+      # Object is not owned by a group
+      false
    end
  end