X-Git-Url: https://git.pterodactylus.net/?a=blobdiff_plain;f=src%2Fmain%2Fjava%2Fnet%2Fpterodactylus%2Fsone%2Fweb%2Fajax%2FDeleteReplyAjaxPage.java;h=f34d2021cb5bab581e85092b49c72c37b290f9da;hb=f840f1f3508b5e09cee9e95182c47775a5a2dc2e;hp=7614de80f2b053a9c27e69a9057d6e019ac66201;hpb=df9e03f9f3e4d9c9f0e10a1c1c35045bbaa5f90e;p=Sone.git diff --git a/src/main/java/net/pterodactylus/sone/web/ajax/DeleteReplyAjaxPage.java b/src/main/java/net/pterodactylus/sone/web/ajax/DeleteReplyAjaxPage.java index 7614de8..f34d202 100644 --- a/src/main/java/net/pterodactylus/sone/web/ajax/DeleteReplyAjaxPage.java +++ b/src/main/java/net/pterodactylus/sone/web/ajax/DeleteReplyAjaxPage.java @@ -18,7 +18,6 @@ package net.pterodactylus.sone.web.ajax; import net.pterodactylus.sone.data.Reply; -import net.pterodactylus.sone.data.Sone; import net.pterodactylus.sone.web.WebInterface; import net.pterodactylus.util.json.JsonObject; @@ -50,14 +49,10 @@ public class DeleteReplyAjaxPage extends JsonPage { protected JsonObject createJsonObject(Request request) { String replyId = request.getHttpRequest().getParam("reply"); Reply reply = webInterface.getCore().getReply(replyId); - Sone currentSone = getCurrentSone(request.getToadletContext()); if (reply == null) { return createErrorJsonObject("invalid-reply-id"); } - if (currentSone == null) { - return createErrorJsonObject("auth-required"); - } - if (!reply.getSone().equals(currentSone)) { + if (!webInterface.getCore().isLocalSone(reply.getSone())) { return createErrorJsonObject("not-authorized"); } webInterface.getCore().deleteReply(reply);