fix delete permissions

backface · Jul 2, 2024 · ef498df · ef498df
1 parent 28ca6c9
commit ef498df
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/apps/projects/views.py b/apps/projects/views.py
@@ -726,7 +726,7 @@ def like(request, id):
 @require_http_methods(["DELETE"])
 def delete_comment(request, id):
     comment = get_object_or_404(Comment, pk=id)
-    if not request.user == comment.author or request.user.is_moderator or request.user.is_superuser:
+    if not request.user == comment.author and not request.user.is_moderator and not request.user.is_superuser:
         raise (PermissionDenied)
     else:
         comment.delete()