Files
Musicminion 6c4829eea4 Track changes: fix permissions (#271)
* track-changes: enforce write and review permissions on review actions

 - Toggling track changes and accepting changes need write access
 - Resolving, reopening and deleting a thread use ensureUserCanDeleteOrResolveThread
 - Deleting a reply needs write or review access, and reviewers may only delete their own replies

* track-changes: leave the reviewer own-reply check out of deleteMessage

 - Deleting a reply is limited by the route only, so reviewers can still delete any reply
2026-11-04 18:28:56 +01:00
..
2026-09-22 02:41:35 +02:00