mirror of
https://github.com/hanzoai/team.git
synced 2026-09-30 01:57:35 +00:00
Daniel Espino GarcíaandGitHub
a2e08f04e8
* Add audits for accessing posts without membership * Fix tests * Use correct audit level * Address feedback * Add missing checks all over the app * Fix lint * Fix test * Fix tests * Fix enterprise test * Add missing test and docs * Fix merge * Fix lint * Add audit logs on the web socket hook for permalink posts * Fix lint * Fix merge conflicts * Handle all events with "non_channel_member_access" parameter * Fix lint and tests * Fix merge * Fix tests
111 lines
3.4 KiB
Go
111 lines
3.4 KiB
Go
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
|
// See LICENSE.txt for license information.
|
|
|
|
package slashcommands
|
|
|
|
import (
|
|
"github.com/mattermost/mattermost/server/public/model"
|
|
"github.com/mattermost/mattermost/server/public/shared/i18n"
|
|
"github.com/mattermost/mattermost/server/public/shared/request"
|
|
"github.com/mattermost/mattermost/server/v8/channels/app"
|
|
)
|
|
|
|
type HeaderProvider struct {
|
|
}
|
|
|
|
const (
|
|
CmdHeader = "header"
|
|
)
|
|
|
|
func init() {
|
|
app.RegisterCommandProvider(&HeaderProvider{})
|
|
}
|
|
|
|
func (*HeaderProvider) GetTrigger() string {
|
|
return CmdHeader
|
|
}
|
|
|
|
func (*HeaderProvider) GetCommand(a *app.App, T i18n.TranslateFunc) *model.Command {
|
|
return &model.Command{
|
|
Trigger: CmdHeader,
|
|
AutoComplete: true,
|
|
AutoCompleteDesc: T("api.command_channel_header.desc"),
|
|
AutoCompleteHint: T("api.command_channel_header.hint"),
|
|
DisplayName: T("api.command_channel_header.name"),
|
|
}
|
|
}
|
|
|
|
func (*HeaderProvider) DoCommand(a *app.App, rctx request.CTX, args *model.CommandArgs, message string) *model.CommandResponse {
|
|
channel, err := a.GetChannel(rctx, args.ChannelId)
|
|
if err != nil {
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_channel_header.channel.app_error"),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
|
|
switch channel.Type {
|
|
case model.ChannelTypeOpen:
|
|
if ok, _ := a.HasPermissionToChannel(rctx, args.UserId, args.ChannelId, model.PermissionManagePublicChannelProperties); !ok {
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_channel_header.permission.app_error"),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
|
|
case model.ChannelTypePrivate:
|
|
if ok, _ := a.HasPermissionToChannel(rctx, args.UserId, args.ChannelId, model.PermissionManagePrivateChannelProperties); !ok {
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_channel_header.permission.app_error"),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
|
|
case model.ChannelTypeGroup, model.ChannelTypeDirect:
|
|
// Modifying the header is not linked to any specific permission for group/dm channels, so just check for membership.
|
|
var channelMember *model.ChannelMember
|
|
channelMember, err = a.GetChannelMember(rctx, args.ChannelId, args.UserId)
|
|
if err != nil || channelMember == nil {
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_channel_header.permission.app_error"),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
|
|
default:
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_channel_header.permission.app_error"),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
|
|
if message == "" {
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_channel_header.message.app_error"),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
|
|
patch := &model.ChannelPatch{
|
|
Header: new(string),
|
|
}
|
|
*patch.Header = message
|
|
|
|
_, err = a.PatchChannel(rctx, channel, patch, args.UserId)
|
|
if err != nil {
|
|
text := args.T("api.command_channel_header.update_channel.app_error")
|
|
if err.Id == "model.channel.is_valid.header.app_error" {
|
|
text = args.T("api.command_channel_header.update_channel.max_length", map[string]any{
|
|
"MaxLength": model.ChannelHeaderMaxRunes,
|
|
})
|
|
}
|
|
|
|
return &model.CommandResponse{
|
|
Text: text,
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
|
|
return &model.CommandResponse{}
|
|
}
|