diff --git a/packages/slimkit-plus-feed/src/API2/FeedController.php b/packages/slimkit-plus-feed/src/API2/FeedController.php index 37cb07ac9..e99d3c751 100755 --- a/packages/slimkit-plus-feed/src/API2/FeedController.php +++ b/packages/slimkit-plus-feed/src/API2/FeedController.php @@ -724,8 +724,7 @@ public function destroy( FeedModel $feed ) { $user = $request->user(); - - if ($user->id !== $feed->user_id) { + if ($user->id !== $feed->user_id || ! $user->ability('[feed] Delete Feed')) { return $response->json(['message' => '你没有权限删除动态'])->setStatusCode(403); } $feed->getConnection()->transaction(function () use ($feed, $user) {