From e67bb5b9e8e7af217fb598024de9972a76dcf2da Mon Sep 17 00:00:00 2001
From: Matteo Pagliazzi <matteopagliazzi@gmail.com>
Date: Sun, 8 Sep 2013 17:42:20 +0200
Subject: [PATCH] fix delete chat message

---
 src/controllers/groups.js | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/src/controllers/groups.js b/src/controllers/groups.js
index bd52cb09e0..ce6c4e0728 100644
--- a/src/controllers/groups.js
+++ b/src/controllers/groups.js
@@ -173,8 +173,10 @@ api.deleteChatMessage = function(req, res, next){
 
   if(message === undefined) return res.json(500, {err: "Message not found!"});
 
-  if(user.id !== message.uuid || (user.backer && !user.backer.admin)){
-    return res.json(500, {err: "Not authorized to delete this message!"});
+  if(user.id !== message.uuid){
+    if(!user.backer || (user.backer && !user.backer.admin)){
+      return res.json(500, {err: "Not authorized to delete this message!"})
+    }
   }
 
   group.chat = _.without(group.chat, message);