Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-28 17:46:16 +01:00
Code Issues Packages Projects Releases Wiki Activity

closes #6607

Browse Source
This commit is contained in:
Barış Soner Uşaklı
2018-06-27 14:36:08 -04:00
parent 12a7e57117
commit 57b7c7ede4
7 changed files with 66 additions and 108 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
src/socket.io/groups.js
View File

@@ -71,14 +71,27 @@ SocketGroups.leave = function (socket, data, callback) {
groups.leave(data.groupName, socket.uid, callback);
};
SocketGroups.addMember = isOwner(function (socket, data, callback) {
if (data.groupName === 'administrators' || groups.isPrivilegeGroup(data.groupName)) {
return callback(new Error('[[error:not-allowed]]'));
}
groups.join(data.groupName, data.uid, callback);
});
function isOwner(next) {
return function (socket, data, callback) {
async.parallel({
isAdmin: async.apply(user.isAdministrator, socket.uid),
isGlobalModerator: async.apply(user.isGlobalModerator, socket.uid),
isOwner: async.apply(groups.ownership.isOwner, socket.uid, data.groupName),
group: async.apply(groups.getGroupData, data.groupName),
}, function (err, results) {
if (err || (!results.isOwner && !results.isAdmin)) {
return callback(err || new Error('[[error:no-privileges]]'));
if (err) {
return callback(err);
}
var isOwner = results.isOwner || results.isAdmin || (results.isGlobalModerator && !results.group.system);
if (!isOwner) {
return callback(new Error('[[error:no-privileges]]'));
}
next(socket, data, callback);
});