[hotfix] delete reaction

This commit is contained in:
ilya-bkv 2023-01-17 11:54:05 +03:00
parent 3ec349eda1
commit f63701a086

View File

@ -198,11 +198,10 @@ async def delete_reaction(_, info, reaction=None):
auth: AuthCredentials = info.context["request"].auth
with local_session() as session:
user = session.query(User).where(User.id == auth.user_id).first()
r = session.query(Reaction).filter(Reaction.id == reaction).first()
if not r:
return {"error": "invalid reaction id"}
if r.createdBy != user.slug:
if r.createdBy != auth.user_id:
return {"error": "access denied"}
r.deletedAt = datetime.now(tz=timezone.utc)
session.commit()