Full delete permission support...

web/root/msgs/management.ssjs

@@ -14,25 +14,39 @@ if(http_request.query.Action=="Delete Message(s)") {
 	var errors=0;
 	errorlist=new Array;
 
-	if(sub!='mail' && !msg_area.grp_list[g].sub_list[s].is_operator) {
-		errorlist.push("Only operators can delete messages!");
-		errors++;
-	}
-	else {
-		for(num in http_request.query.number) {
-			var mnum=parseInt(http_request.query.number[num]);
-			if(sub==mail && ((idx=get_msg_index(false,mnum))==null || idx.to!=user.number) {
+	for(num in http_request.query.number) {
+		var mnum=parseInt(http_request.query.number[num]);
+
+		if(sub==mail && ((idx=get_msg_index(false,mnum))==null || idx.to!=user.number) {
+			errors++;
+			errorlist.push("Cannot delete message "+mnum);
+			continue;
+		}
+		if(sub!='mail' && !msg_area.grp_list[g].sub_list[s].is_operator) {
+			if(!msg_area.grp_list[g].sub_list[s].settings&SUB_DEL) {
+				errorlist.push("Only operators can delete messages!");
 				errors++;
-				errorlist.push("Cannot delete message "+mnum);
+				continue;
 			}
-			else {
-				if(msgbase.remove_msg(false,mnum))
-					deleted++;
-				else {
+			if(msg_area.grp_list[g].sub_list[s].settings&SUB_DELLAST) {
+				if(msgbase.last_msg!=mnum) {
+					errorlist.push("You can only delete the last post!");
 					errors++;
-					errorlist.push(msgbase.last_error);
+					continue;
 				}
 			}
+			if((hdr=get_msg_header(false,mnum))==null || hdr.from_ext!=user.number) {
+				errorlist.push("You can only delete your own messages!");
+				errors++;
+				continue;
+			}
+		}
+
+		if(msgbase.remove_msg(false,mnum))
+			deleted++;
+		else {
+			errors++;
+			errorlist.push(msgbase.last_error);
 		}
 	}
 	template.title=deleted+" Messages Deleted";