From eea87be65dc1e7fa35f7f1b03a26fdb76b460f0e Mon Sep 17 00:00:00 2001
From: Roger Ostrander <reostra@reddit.com>
Date: Tue, 9 Jul 2013 11:02:48 -0700
Subject: [PATCH] Moderators:  Check spam status for demote / permission change

---
 r2/r2/controllers/api.py | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/r2/r2/controllers/api.py b/r2/r2/controllers/api.py
index 4c7dd2917..ed4346379 100755
--- a/r2/r2/controllers/api.py
+++ b/r2/r2/controllers/api.py
@@ -623,6 +623,8 @@ class ApiController(RedditController, OAuth2ResourceController):
         """
         if type in self._sr_friend_types:
             container = c.site
+            if c.user._spam:
+                return
         else:
             container = VByName('container').run(container)
             if not container:
@@ -677,6 +679,9 @@ class ApiController(RedditController, OAuth2ResourceController):
         if form.has_errors('permissions', errors.INVALID_PERMISSIONS):
             return
 
+        if c.user._spam:
+            return
+
         type, permissions = type_and_permissions
         update = None