From 18314956ca1201199de084c1443393ed99a2b835 Mon Sep 17 00:00:00 2001 From: Thomas Citharel Date: Tue, 21 Nov 2023 12:00:04 +0100 Subject: [PATCH] fix(api): fix allowing posting event private announcement Signed-off-by: Thomas Citharel --- lib/graphql/resolvers/participant.ex | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/lib/graphql/resolvers/participant.ex b/lib/graphql/resolvers/participant.ex index 23e739873..ad5058c1e 100644 --- a/lib/graphql/resolvers/participant.ex +++ b/lib/graphql/resolvers/participant.ex @@ -378,7 +378,8 @@ defmodule Mobilizon.GraphQL.Resolvers.Participant do with {:member, true} <- {:member, - current_actor_id == actor_id or Actors.is_member?(current_actor_id, actor_id)}, + to_string(current_actor_id) == to_string(actor_id) or + Actors.is_member?(current_actor_id, actor_id)}, {:ok, _activity, %Conversation{} = conversation} <- Comments.create_conversation(args) do {:ok, conversation_to_view(conversation, Actors.get_actor(actor_id))} else