POST_selectflair: return 404 if neither link or user.

2026-04-27 03:00:12 -04:00 · 2015-09-14 19:19:34 -04:00
parent a8daf93f26
commit 65dc955d57
1 changed files with 3 additions and 1 deletions
--- a/r2/r2/controllers/api.py
+++ b/r2/r2/controllers/api.py
@@ -4029,11 +4029,13 @@ class ApiController(RedditController):
            subreddit = link.subreddit_slow
            if not (c.user_is_admin or link.can_flair_slow(c.user)):
                abort(403)
-        else:
+        elif user:
            flair_type = USER_FLAIR
            subreddit = c.site
            if not (c.user_is_admin or user.can_flair_in_sr(c.user, subreddit)):
                abort(403)
+        else:
+            return self.abort404()

        if flair_template_id:
            try: