From fa97936ddbf9e11a2c9bc91a424bf0e84038385c Mon Sep 17 00:00:00 2001
From: "waffle.lord" <waffle.lord@hotmail.com>
Date: Tue, 8 Oct 2024 09:32:49 -0400
Subject: [PATCH] no delete for moderators

also add update
---
 app/Policies/ModPolicy.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/app/Policies/ModPolicy.php b/app/Policies/ModPolicy.php
index 24c79ef..511c13d 100644
--- a/app/Policies/ModPolicy.php
+++ b/app/Policies/ModPolicy.php
@@ -37,7 +37,7 @@ class ModPolicy
      */
     public function update(User $user, Mod $mod): bool
     {
-        return false;
+        return $user->isMod() || $user->isAdmin() || $mod->users->contains($user);
     }
 
     /**
@@ -48,7 +48,7 @@ class ModPolicy
         // I'm guessing we want the mod author to also be able to do this?
         // what if there are multiple authors?
         // I'm leaving that out for now -waffle.lazy
-        return $user->isMod() || $user->isAdmin();
+        return $user->isAdmin();
     }
 
     /**