velvox
/
litecord
mirror of https://gitlab.com/litecord/litecord.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

channel.messages: add permission checks

This commit is contained in:
Luna Mendes 2018-11-21 20:49:03 -03:00
parent a974ff34ba
commit a0ad3a74b8
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
litecord/blueprints/channel/messages.py
View File

@ -51,8 +51,8 @@ def query_tuple_from_args(args: dict, limit: int) -> tuple:
async def get_messages(channel_id): async def get_messages(channel_id):
user_id = await token_check() user_id = await token_check()
# TODO: check READ_MESSAGE_HISTORY permission
ctype, peer_id = await channel_check(user_id, channel_id) ctype, peer_id = await channel_check(user_id, channel_id)
await channel_perm_check(user_id, channel_id, 'read_history')
if ctype == ChannelType.DM: if ctype == ChannelType.DM:
# make sure both parties will be subbed # make sure both parties will be subbed
@ -97,8 +97,8 @@ async def get_messages(channel_id):
async def get_single_message(channel_id, message_id): async def get_single_message(channel_id, message_id):
user_id = await token_check() user_id = await token_check()
await channel_check(user_id, channel_id) await channel_check(user_id, channel_id)
await channel_perm_check(user_id, channel_id, 'read_history')
# TODO: check READ_MESSAGE_HISTORY permissions
message = await app.storage.get_message(message_id, user_id) message = await app.storage.get_message(message_id, user_id)
if not message: if not message: