diff --git a/pagure/ui/fork.py b/pagure/ui/fork.py index b62d71d..a7f8412 100644 --- a/pagure/ui/fork.py +++ b/pagure/ui/fork.py @@ -359,7 +359,8 @@ def pull_request_drop_comment(repo, requestid, username=None): if comment is None or comment.pull_request.repo != repo: flask.abort(404, 'Comment not found') - if flask.g.fas_user.username != comment.user.username \ + if (flask.g.fas_user.username != comment.user.username + and comment.parent.status == True) \ or not is_repo_admin(repo): flask.abort( 403, diff --git a/pagure/ui/issues.py b/pagure/ui/issues.py index 05617a9..f1584b1 100644 --- a/pagure/ui/issues.py +++ b/pagure/ui/issues.py @@ -77,7 +77,8 @@ def update_issue(repo, issueid, username=None): if comment is None or comment.issue.project != repo: flask.abort(404, 'Comment not found') - if flask.g.fas_user.username != comment.user.username \ + if (flask.g.fas_user.username != comment.user.username + and comment.parent.status == True) \ or not is_repo_admin(repo): flask.abort( 403,