Reauth endpoint

2024-07-28 22:37:12 +02:00
parent 7723dd0722
commit 9828ee762a
9 changed files with 201 additions and 26 deletions
@@ -60,7 +60,7 @@ class Posts extends Api
      $post = Post::getByID($id);

      // Throw 400 if we aren't admin but trying to edit another users post.
-      if (!$self->getIsAdmin() && $post->getUser()->getID() !== $self->getID()) throw ApiError::unauthorized("Not allowed");
+      if (!$self->getIsAdmin() && $post->getUser()->getID() !== $self->getID()) throw ApiError::notAllowed("Not allowed");

      // Try update.
      Response::json($post->update($content));