HyperNet/Messaging
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

🐛 Fix no perm check on DM

Browse Source
This commit is contained in:
LittleSheep 2025-02-15 15:49:07 +08:00
parent 2228f5054d
commit 406eb9c93b
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pkg/internal/http/api/direct_channels_api.go
View File

@ -53,6 +53,10 @@ func createDirectChannel(c *fiber.Ctx) error {
return fiber.NewError(fiber.StatusBadRequest, fmt.Sprintf("you already have a direct with that user #%d", ch.ID)) return fiber.NewError(fiber.StatusBadRequest, fmt.Sprintf("you already have a direct with that user #%d", ch.ID))
} }
if err := authkit.EnsureUserPermGranted(gap.Nx, user.ID, relatedUser.ID, "ChannelAdd", true); err != nil {
return fmt.Errorf("unable to add user into your channel due to access denied: %v", err)
}
channel := models.Channel{ channel := models.Channel{
Alias: data.Alias, Alias: data.Alias,
Name: data.Name, Name: data.Name,