M fun.go → fun.go

@@ -385,7 +385,7 @@ }
 	return false
 }
 
-func keymatch(keyname string, actor string, userid int64) bool {
+func keymatch(keyname string, actor string, what string, userid int64) bool {
 	hash := strings.IndexByte(keyname, '#')
 	if hash == -1 {
 		hash = len(keyname)
@@ -393,6 +393,9 @@ }
 	owner := keyname[0:hash]
 	if owner == actor {
 		return true
+	}
+	if what != "Create" {
+		return false
 	}
 	row := stmtHasHonker.QueryRow(owner, userid)
 	var id int64

M honk.go → honk.go

@@ -314,7 +314,7 @@ if what == "Like" {
 		return
 	}
 	who, _ := jsongetstring(j, "actor")
-	if !keymatch(keyname, who, user.ID) {
+	if !keymatch(keyname, who, what, user.ID) {
 		log.Printf("keyname actor mismatch: %s <> %s", keyname, who)
 		return
 	}