404 for non-moderators

daemon.py

@@ -1879,7 +1879,7 @@ class PubServer(BaseHTTPRequestHandler):
 
         # person options screen, Info button
         # See htmlPersonOptions
-        if '&submitInfo=' in optionsConfirmParams:
+        if '&submitPersonInfo=' in optionsConfirmParams:
             if isModerator(self.server.baseDir, chooserNickname):
                 if debug:
                     print('Showing info for ' + optionsActor)
@@ -1898,6 +1898,9 @@ class PubServer(BaseHTTPRequestHandler):
                 self._write(msg)
                 self.server.POSTbusy = False
                 return
+            else:
+                self._404()
+                return
 
         # person options screen, snooze button
         # See htmlPersonOptions

webapp_person_options.py

@@ -229,7 +229,8 @@ def htmlPersonOptions(defaultTimeline: str,
 
     if isModerator(baseDir, nickname):
         optionsStr += \
-            '    <button type="submit" class="button" name="submitInfo">' + \
+            '    <button type="submit" class="button" ' + \
+            'name="submitPersonInfo">' + \
             translate['Info'] + '</button>\n'
 
     personNotes = ''