flaxo/ghost

let only a comment's author edit itVerifiedBrowse files at 98ad8bd

Gurpal committed 15 days ago · 7 changed files

Writers could rewrite anyone's issue comments, line comments and review summaries. Editing is now the author's alone and answers 403 otherwise; writers keep deleting other people's comments. The UI shows Edit to the author only and Delete to the author or a writer.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

apps/api/src/resources/issues/issues.errors.ts

apps/api/src/resources/issues/issues.service.ts

apps/api/src/resources/pull-requests/reviews.service.ts

apps/api/test/pull-request-reviews.e2e-spec.ts

apps/web/src/components/issues/comments.tsx

apps/web/src/components/pull-requests/review.tsx

docs/0026-a-review-is-pinned-to-the-head-it-read.md