diff --git a/src/communication/views.py b/src/communication/views.py index 2490417..768f84d 100644 --- a/src/communication/views.py +++ b/src/communication/views.py @@ -78,7 +78,12 @@ def delete_message(request, messageid): """Supprime le message dont la clé est passée en paramètre. """ try: - Message.objects.get(pk=messageid).delete() + message = Message.objects.get(pk=messageid) + + if message.sender == request.user or message.recipient == request.user : + message.delete() + else: + return HttpResponse(401) except: return HttpResponse(400)