From 6a0007c41012cb9a566415080c1fb5852ade90ae Mon Sep 17 00:00:00 2001
From: hannes <h@nnesmannerhe.im>
Date: Sat, 27 Feb 2016 01:03:24 +0000
Subject: [PATCH] moderators can delete others' notices using the api

---
 actions/apistatusesdestroy.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/actions/apistatusesdestroy.php b/actions/apistatusesdestroy.php
index 2d32124c42..f681ee8419 100644
--- a/actions/apistatusesdestroy.php
+++ b/actions/apistatusesdestroy.php
@@ -69,6 +69,7 @@ class ApiStatusesDestroyAction extends ApiAuthAction
         parent::prepare($args);
 
         $this->user = $this->auth_user;
+        $this->profile = $this->auth_user->getProfile();        
         $this->notice_id = (int)$this->trimmed('id');
 
         if (empty($notice_id)) {
@@ -122,7 +123,7 @@ class ApiStatusesDestroyAction extends ApiAuthAction
             return;
         }
 
-        if ($this->user->id == $this->notice->profile_id) {
+        if ($this->user->id == $this->notice->profile_id || $this->profile->hasRight(Right::DELETEOTHERSNOTICE)) {
             if (Event::handle('StartDeleteOwnNotice', array($this->user, $this->notice))) {
                 $this->notice->deleteAs($this->scoped);
                 Event::handle('EndDeleteOwnNotice', array($this->user, $this->notice));