activitypods / activitypods/mastopod
Cannot boost someone else post
- 主要語言
- JavaScript
- 星號
- 25
- 分支
- 2
- PR 合併指標
- 30 天內沒有已合併 PR
描述
If I try to boost someone else's post, I get this error:
> Only the creator has the right to share the object
It works if I boost my own posts.
Indeed, `Announce` activities are currently handled by the AnnouncerService, which is considering "announcing" as a way to give view permissions to an object, and thus restrict it to the owner.
Instead of throwing an error, we could simply ignore the permissions part if the announcer is not the creator of the object.
But this is more difficult when receiving a `Announce` activity, because the AnnouncerService store it in cache.
In the future, the idea will be to use capabilities to share resources, so the AnnouncerService will disappear.
But is there something quick to do in the meanwhile ?
貢獻指南
這個儲存庫沒有索引到貢獻指南
研究方向
The only implementation hint is AnnouncerService; start by locating that service and the code path for `Announce` handling. Follow where the owner-only share error is raised and where incoming announce activities are cached, then adjust logic so non-owner announcers are allowed to boost without that permission gate. Verify by reproducing a boost of someone else’s post and confirming the share permission error is no longer returned.
由索引模型根據 Issue 內容生成。
評估
- 技術堆疊
- javascript
- 領域
- backend
- Issue 類型
- 缺陷
- 難度
- 3/5
- 預估耗時
- 1-2 天
- 活躍度
- 停滯
- 描述清晰度
- 基本清楚
- 新手友好度
- 50/100