From c2fbe8fe5da655f5f04527d7ee7e07e844fcfcbf Mon Sep 17 00:00:00 2001 From: kolaente Date: Wed, 9 May 2018 19:00:38 +0200 Subject: [PATCH] Fixed permission to update a deadline via api --- routers/api/v1/repo/issue.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/routers/api/v1/repo/issue.go b/routers/api/v1/repo/issue.go index ab6429cde..5df3ee171 100644 --- a/routers/api/v1/repo/issue.go +++ b/routers/api/v1/repo/issue.go @@ -270,7 +270,7 @@ func EditIssue(ctx *context.APIContext, form api.EditIssueOption) { // Update the deadline var deadlineUnix util.TimeStamp - if form.Deadline != nil && !form.Deadline.IsZero() { + if form.Deadline != nil && !form.Deadline.IsZero() && ctx.Repo.IsWriter() { deadlineUnix = util.TimeStamp(form.Deadline.Unix()) } @@ -374,7 +374,7 @@ func UpdateIssueDeadline(ctx *context.APIContext, form api.EditDeadlineOption) { return } - if !issue.IsPoster(ctx.User.ID) && !ctx.Repo.IsWriter() { + if !ctx.Repo.IsWriter() { ctx.Status(403) return }