mirror of
https://github.com/hanzoai/team.git
synced 2026-09-30 01:57:35 +00:00
Daniel Espino GarcíaandGitHub
a2e08f04e8
* Add audits for accessing posts without membership * Fix tests * Use correct audit level * Address feedback * Add missing checks all over the app * Fix lint * Fix test * Fix tests * Fix enterprise test * Add missing test and docs * Fix merge * Fix lint * Add audit logs on the web socket hook for permalink posts * Fix lint * Fix merge conflicts * Handle all events with "non_channel_member_access" parameter * Fix lint and tests * Fix merge * Fix tests
64 lines
2.0 KiB
Go
64 lines
2.0 KiB
Go
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
|
// See LICENSE.txt for license information.
|
|
|
|
package wsapi
|
|
|
|
import (
|
|
"github.com/mattermost/mattermost/server/public/model"
|
|
"github.com/mattermost/mattermost/server/public/shared/request"
|
|
)
|
|
|
|
func (api *API) InitUser() {
|
|
api.Router.Handle("user_typing", api.APIWebSocketHandler(api.userTyping))
|
|
api.Router.Handle("user_update_active_status", api.APIWebSocketHandler(api.userUpdateActiveStatus))
|
|
}
|
|
|
|
func (api *API) userTyping(req *model.WebSocketRequest) (map[string]any, *model.AppError) {
|
|
api.App.ExtendSessionExpiryIfNeeded(request.EmptyContext(api.App.Log()), &req.Session)
|
|
|
|
if api.App.Srv().Platform().Busy.IsBusy() {
|
|
// this is considered a non-critical service and will be disabled when server busy.
|
|
return nil, NewServerBusyWebSocketError(req.Action)
|
|
}
|
|
|
|
var ok bool
|
|
var channelId string
|
|
if channelId, ok = req.Data["channel_id"].(string); !ok || !model.IsValidId(channelId) {
|
|
return nil, NewInvalidWebSocketParamError(req.Action, "channel_id")
|
|
}
|
|
|
|
if hasPermission, _ := api.App.SessionHasPermissionToChannel(request.EmptyContext(api.App.Log()), req.Session, channelId, model.PermissionCreatePost); !hasPermission {
|
|
return nil, NewInvalidWebSocketParamError(req.Action, "channel_id")
|
|
}
|
|
|
|
var parentId string
|
|
if parentId, ok = req.Data["parent_id"].(string); !ok {
|
|
parentId = ""
|
|
}
|
|
|
|
appErr := api.App.PublishUserTyping(req.Session.UserId, channelId, parentId)
|
|
|
|
return nil, appErr
|
|
}
|
|
|
|
func (api *API) userUpdateActiveStatus(req *model.WebSocketRequest) (map[string]any, *model.AppError) {
|
|
var ok bool
|
|
var userIsActive bool
|
|
if userIsActive, ok = req.Data["user_is_active"].(bool); !ok {
|
|
return nil, NewInvalidWebSocketParamError(req.Action, "user_is_active")
|
|
}
|
|
|
|
var manual bool
|
|
if manual, ok = req.Data["manual"].(bool); !ok {
|
|
manual = false
|
|
}
|
|
|
|
if userIsActive {
|
|
api.App.SetStatusOnline(req.Session.UserId, manual)
|
|
} else {
|
|
api.App.SetStatusAwayIfNeeded(req.Session.UserId, manual)
|
|
}
|
|
|
|
return nil, nil
|
|
}
|