api/auth: fix for not being allowed to set your own state_key

Signed-off-by: Patrik Oldsberg <patrik.oldsberg@ericsson.com>
This commit is contained in:
Patrik Oldsberg 2016-09-29 01:27:36 +02:00
parent 36d621201b
commit 24a70e19c7

View File

@ -1002,16 +1002,6 @@ class Auth(object):
403,
"You are not allowed to set others state"
)
else:
sender_domain = UserID.from_string(
event.user_id
).domain
if sender_domain != event.state_key:
raise AuthError(
403,
"You are not allowed to set others state"
)
return True