Issue 96restrict db (#1817)

* Protect against brute force id lookups from below Admins Post #1816
OpenUserJS · Jun 2, 2021 · ff1ccce · ff1ccce
1 parent 2bdc57f
commit ff1ccce
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/controllers/moderation.js b/controllers/moderation.js
@@ -42,10 +42,10 @@ exports.removedItemPage = function (aReq, aRes, aNext) {
   options.isMod = authedUser && authedUser.isMod;
   options.isAdmin = authedUser && authedUser.isAdmin;
 
-  if (!options.isMod) {
+  if (!options.isAdmin) {
     statusCodePage(aReq, aRes, aNext, {
       statusCode: 403,
-      statusMessage: 'This page is only accessible by moderators',
+      statusMessage: 'This page is only accessible by admins',
     });
     return;
   }