fix

Wilcolab · Jan 22, 2024 · 2baf9e6 · 2baf9e6
1 parent 438b634
commit 2baf9e6
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/backend/src/main/java/io/spring/api/CommentsApi.java b/backend/src/main/java/io/spring/api/CommentsApi.java
@@ -70,6 +70,9 @@ public ResponseEntity deleteComment(
         .findById(item.getId(), commentId)
         .map(
             comment -> {
+              if (item.getSellerId() != comment.getUserId()) {
+                throw new ResponseStatusException(HttpStatus.FORBIDDEN); 
+              }
               commentRepository.remove(comment);
               return ResponseEntity.noContent().build();
             })