activitypods / activitypods/mastopod

Cannot boost someone else post

Aberta
#24 2 comentários 1 reação 0 responsáveis Ver no GitHub
bug
Linguagem predominante
JavaScript
Estrelas
25
Forks
2
Métricas de merge de PRs
Nenhum PR com merge em 30d

Descrição

If I try to boost someone else's post, I get this error:

> Only the creator has the right to share the object

It works if I boost my own posts.

Indeed, `Announce` activities are currently handled by the AnnouncerService, which is considering "announcing" as a way to give view permissions to an object, and thus restrict it to the owner.

Instead of throwing an error, we could simply ignore the permissions part if the announcer is not the creator of the object.

But this is more difficult when receiving a `Announce` activity, because the AnnouncerService store it in cache.

In the future, the idea will be to use capabilities to share resources, so the AnnouncerService will disappear.

But is there something quick to do in the meanwhile ?

Guia de contribuição

Nenhum guia de contribuição indexado para este repositório

Direção de pesquisa

The only implementation hint is AnnouncerService; start by locating that service and the code path for `Announce` handling. Follow where the owner-only share error is raised and where incoming announce activities are cached, then adjust logic so non-owner announcers are allowed to boost without that permission gate. Verify by reproducing a boost of someone else’s post and confirming the share permission error is no longer returned.

Escrita pelo modelo de indexação a partir do texto da issue.

Avaliação

Stack de tecnologia
javascript
Domínio
backend
Tipo de issue
Bug
Dificuldade
3/5
Tempo estimado
1-2 dias
Status de atividade
Estagnada
Clareza
Razoavelmente clara
Facilidade para iniciantes
50/100

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.