From 1d76adf7f78d3ba6a54ac7b0071629a70d971dca Mon Sep 17 00:00:00 2001 From: Max Goodman Date: Tue, 27 Aug 2013 13:39:58 -0700 Subject: [PATCH] Only allow admins to modify system_user's multis. --- r2/r2/models/subreddit.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/r2/r2/models/subreddit.py b/r2/r2/models/subreddit.py index b0e3f4f96..945da8078 100644 --- a/r2/r2/models/subreddit.py +++ b/r2/r2/models/subreddit.py @@ -1351,7 +1351,7 @@ class LabeledMulti(tdb_cassandra.Thing, MultiReddit): return user == self.owner or self.visibility == 'public' def can_edit(self, user): - if c.user_is_admin: + if c.user_is_admin and self.owner == Account.system_user(): return True return user == self.owner