natty
/
calckey
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

userListチャンネルのオーナーチェック Fix #5772 (#5773) 

* userListチャンネルのオーナーチェック Fix #5772

* comment
This commit is contained in:
MeiMei 2020-01-27 05:36:59 +09:00 committed by syuilo
parent cff91a7674
commit 0c1076c917
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/server/api/stream/channels/user-list.ts
View File

@ -1,6 +1,6 @@
import autobind from 'autobind-decorator'; import autobind from 'autobind-decorator';
import Channel from '../channel'; import Channel from '../channel';
import { Notes, UserListJoinings } from '../../../../models'; import { Notes, UserListJoinings, UserLists } from '../../../../models';
import shouldMuteThisNote from '../../../../misc/should-mute-this-note'; import shouldMuteThisNote from '../../../../misc/should-mute-this-note';
import { User } from '../../../../models/entities/user'; import { User } from '../../../../models/entities/user';
import { PackedNote } from '../../../../models/repositories/note'; import { PackedNote } from '../../../../models/repositories/note';
@ -17,6 +17,13 @@ export default class extends Channel {
public async init(params: any) { public async init(params: any) {
this.listId = params.listId as string; this.listId = params.listId as string;
// Check existence and owner
const list = await UserLists.findOne({
id: this.listId,
userId: this.user!.id
});
if (!list) return;
// Subscribe stream // Subscribe stream
this.subscriber.on(`userListStream:${this.listId}`, this.send); this.subscriber.on(`userListStream:${this.listId}`, this.send);