activitypods / activitypods/mastopod

Cannot boost someone else post

未關閉
#24 2 則留言 1 個 reaction 已指派 0 人 在 GitHub 檢視
bug
主要語言
JavaScript
星號
25
分支
2
PR 合併指標
30 天內沒有已合併 PR

描述

If I try to boost someone else's post, I get this error:

> Only the creator has the right to share the object

It works if I boost my own posts.

Indeed, `Announce` activities are currently handled by the AnnouncerService, which is considering "announcing" as a way to give view permissions to an object, and thus restrict it to the owner.

Instead of throwing an error, we could simply ignore the permissions part if the announcer is not the creator of the object.

But this is more difficult when receiving a `Announce` activity, because the AnnouncerService store it in cache.

In the future, the idea will be to use capabilities to share resources, so the AnnouncerService will disappear.

But is there something quick to do in the meanwhile ?

貢獻指南

這個儲存庫沒有索引到貢獻指南

研究方向

The only implementation hint is AnnouncerService; start by locating that service and the code path for `Announce` handling. Follow where the owner-only share error is raised and where incoming announce activities are cached, then adjust logic so non-owner announcers are allowed to boost without that permission gate. Verify by reproducing a boost of someone else’s post and confirming the share permission error is no longer returned.

由索引模型根據 Issue 內容生成。

評估

技術堆疊
javascript
領域
backend
Issue 類型
缺陷
難度
3/5
預估耗時
1-2 天
活躍度
停滯
描述清晰度
基本清楚
新手友好度
50/100

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。