• effward@lemmy.world
    link
    fedilink
    English
    arrow-up
    41
    ·
    10 months ago

    I love that you found this workaround, but arguably that code path should do the admin check, too.

    • Skull giver@popplesburger.hilciferous.nl
      link
      fedilink
      arrow-up
      16
      ·
      10 months ago

      I agree, I think it was just an oversight. Based on the context, it seems like the code assumes that error handling for anything but “database is gone” is unnecessary. Doing user lookups with those assumptions may be difficult, and I don’t think the Lemmy devs were trying to protect against shenanigans like these.

      I don’t really see what you would gain from blocking a local admin (not like the admin is any less powerful to take action against you) so I wouldn’t expect it to be that bad. I’m a little surprised it’s not possible to block admins in the first place.

      I can’t be bothered to actually check if the import does indeed allow blocking local instance admins; I just assumed so based on a quick read of the code. This seems like a rather unimportant bug, but if someone cares they should probably file an issue (or, even better, a pull request).