Mirrors/continuwuity
0
0 Fork 0
mirror of https://forgejo.ellis.link/continuwuation/continuwuity.git synced 2026-11-14 04:37:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

add ignored user checks on /context and /event, misc cleanup

Browse Source 
Signed-off-by: strawberry <strawberry@puppygock.gay>
This commit is contained in:
strawberry committed 2024-12-04 18:33:12 -05:00
1 parent ad0c5ceda4
commit fe1ce521aa
2 files changed
+46 -27
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

src/api/client/context.rs
+6 -2
View File
@@ -79,11 +79,15 @@ pub(crate) async fn get_context_route(
let (base_token, base_event, visible) = try_join!(base_token, base_event, visible)?;
if base_event.room_id != body.room_id {
if base_event.room_id != body.room_id || base_event.event_id != body.event_id {
return Err!(Request(NotFound("Base event not found.")));
}
if !visible {
if !visible
|| ignored_filter(&services, (base_token, base_event.clone()), sender_user)
.await
.is_none()
{
return Err!(Request(Forbidden("You don't have permission to view this event.")));
}