Check domain of events properly

Federated servers still need to delegate authority to owning servers
2015-09-01 11:53:31 +01:00 · 2015-09-01 11:53:31 +01:00 · b854a375b0
parent 4d1ea40008
commit b854a375b0
1 changed files with 3 additions and 1 deletions
--- a/synapse/api/auth.py
+++ b/synapse/api/auth.py
@ -561,7 +561,9 @@ class Auth(object):
        if user_level > redact_level:
            return False

-        if EventID.from_string(event.redacts).domain == self.hs.get_config().server_name:
+        redacter_domain = EventID.from_string(event.event_id).domain
+        redactee_domain = EventID.from_string(event.redacts).domain
+        if redacter_domain == redactee_domain:
            return True

        raise AuthError(