From ee2fafb6bc5133f06a562fcab42767f99ccee791 Mon Sep 17 00:00:00 2001 From: Ben0it-T Date: Sat, 18 Dec 2021 13:03:37 +0100 Subject: [PATCH] Fix: boardAdmin can't edit or delete others comments on cards #4237 --- models/cardComments.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/models/cardComments.js b/models/cardComments.js index 8dbd437e2..f8c860704 100644 --- a/models/cardComments.js +++ b/models/cardComments.js @@ -75,10 +75,10 @@ CardComments.allow({ return allowIsBoardMember(userId, Boards.findOne(doc.boardId)); }, update(userId, doc) { - return userId === doc.userId; + return userId === doc.userId || allowIsBoardAdmin(userId, Boards.findOne(doc.boardId)); }, remove(userId, doc) { - return userId === doc.userId; + return userId === doc.userId || allowIsBoardAdmin(userId, Boards.findOne(doc.boardId)); }, fetch: ['userId', 'boardId'], });