@@ -180,8 +180,8 @@ class PublicApiController extends Controller
if(!$user) {
abort(403);
} else {
- $follows = $profile->followedBy(Auth::user()->profile);
- if($follows == false && $profile->id !== $user->profile->id) {
+ $follows = $profile->followedBy($user->profile);
+ if($follows == false && $profile->id !== $user->profile->id && $user->is_admin == false) {
abort(404);
}
@@ -42,11 +42,11 @@ class StatusController extends Controller
if($status->visibility == 'private' || $user->is_private) {
if(!Auth::check()) {
- abort(403);
+ abort(404);
$pid = Auth::user()->profile;
- if($user->followedBy($pid) == false && $user->id !== $pid->id) {
+ if($user->followedBy($pid) == false && $user->id !== $pid->id && Auth::user()->is_admin == false) {