Question re: Origin Based Security Model (FEP-fe34)
2026-05-22 14:53 UTC
@nutomic@lemmy.ml said:
but rejecting mod actions based on that could cause problems as I mentioned in my previous comment.
So to confirm then, you serve the moderator collection but you don't use it to determine whether an actor is able to modify/delete content on that instance, is that right?
Curious to know what those problems are.
Replies (1)
-
@nutomic@lemmy.ml 2026-05-25 13:01
We use the moderator collection. But if that fails we check if the mod is from the same instance as the community or the post/comment being removed. If thats true we also allow the action.