version 0.0.24
This commit is contained in:
@@ -141,7 +141,7 @@ router.delete('/:id', authMiddleware, (req, res) => {
|
||||
if (!message) return res.status(404).json({ error: 'Message not found' });
|
||||
|
||||
const canDelete = message.user_id === req.user.id ||
|
||||
(req.user.role === 'admin' && message.group_type === 'public') ||
|
||||
req.user.role === 'admin' ||
|
||||
(message.group_type === 'private' && message.group_owner_id === req.user.id);
|
||||
|
||||
if (!canDelete) return res.status(403).json({ error: 'Cannot delete this message' });
|
||||
|
||||
Reference in New Issue
Block a user