Votes in comments check page-edit permission for resets

Description

The endpoint for resets references the pageId.

When resetting a vote this page is checked for edit-permissions, in order to allow the reset.
Otherwise the request is answered with a HTTP 401 Unauthorized.

When the macro is placed in a comment, the edit permission on the comment should be checked, not the page.

Environment

None

Status

Assignee

Unassigned

Reporter

Simon Tost

Labels

None

Affects versions

Priority

Minor
Configure