anyproto/any-sync
1
0
Fork 0
mirror of https://github.com/anyproto/any-sync.git synced 2025-06-07 21:47:02 +09:00
Code Activity

Request to join checks

Browse source
This commit is contained in:
Mikhail Rakhmanov 2025-05-21 20:08:03 +02:00
parent c86f0c0dc8
commit dc0601f159
No known key found for this signature in database
GPG key ID: DED12CFEF5B8396B
3 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
commonspace/object/acl/list/aclrecordbuilder.go
View file

@ -488,7 +488,7 @@ func (a *aclRecordBuilder) buildInviteRevoke(inviteRecordId string) (value *aclr
func (a *aclRecordBuilder) BuildRequestJoin(payload RequestJoinPayload) (rawRecord *consensusproto.RawRecord, err error) {
var inviteId string
for id, inv := range a.state.invites {
if inv.Key.Equals(payload.InviteKey.GetPublic()) && inv.Type == aclrecordproto.AclInviteType_RequestToJoin {
if inv.Key.Equals(payload.InviteKey.GetPublic()) {
inviteId = id
}
}

2
commonspace/object/acl/list/acltestsuite_test.go
View file

@ -142,6 +142,8 @@ func TestAclExecutor(t *testing.T) {
{"a.batch::revoke:oldInvId;invite_anyone:someId,a", nil},
{"new4.invite_join::someId", nil},
{"new4.add::super,r,superm", nil},
// check that users can't join using request to join for anyone can join links
{"new5.join::someId", ErrNoSuchInvite},
}
for _, cmd := range cmds {
err := a.Execute(cmd.cmd)

3
commonspace/object/acl/list/validator.go
View file

@ -282,6 +282,9 @@ func (c *contentValidator) ValidateRequestJoin(ch *aclrecordproto.AclAccountRequ
if !c.aclState.Permissions(authorIdentity).NoPermissions() {
return ErrInsufficientPermissions
}
if invite.Type != aclrecordproto.AclInviteType_RequestToJoin {
return ErrNoSuchInvite
}
inviteIdentity, err := c.keyStore.PubKeyFromProto(ch.InviteIdentity)
if err != nil {
return