summaryrefslogtreecommitdiffstats
path: root/api/channel.go
diff options
context:
space:
mode:
authorJoram Wilander <jwawilander@gmail.com>2016-12-20 09:27:29 -0500
committerChristopher Speller <crspeller@gmail.com>2016-12-20 09:27:29 -0500
commit1f67c91fcec746aeeb34b9c39b7df328d5f6a4a0 (patch)
tree5e89cf3867369e75d89dd95069c458be75c0d51c /api/channel.go
parentbf3fec604fc4ad0fd53d38490c18d872bccd629d (diff)
downloadchat-1f67c91fcec746aeeb34b9c39b7df328d5f6a4a0.tar.gz
chat-1f67c91fcec746aeeb34b9c39b7df328d5f6a4a0.tar.bz2
chat-1f67c91fcec746aeeb34b9c39b7df328d5f6a4a0.zip
Prevent accidental removal of user from town square (#4842)
Diffstat (limited to 'api/channel.go')
-rw-r--r--api/channel.go15
1 files changed, 9 insertions, 6 deletions
diff --git a/api/channel.go b/api/channel.go
index e4786c616..dcc4ed563 100644
--- a/api/channel.go
+++ b/api/channel.go
@@ -1003,23 +1003,22 @@ func getChannel(c *Context, w http.ResponseWriter, r *http.Request) {
func getChannelByName(c *Context, w http.ResponseWriter, r *http.Request) {
params := mux.Vars(r)
- channelname := params["channel_name"]
+ channelName := params["channel_name"]
- cchan := Srv.Store.Channel().GetByName(c.TeamId, channelname)
+ cchan := Srv.Store.Channel().GetByName(c.TeamId, channelName)
if cresult := <-cchan; cresult.Err != nil {
c.Err = cresult.Err
return
} else {
- data := &model.Channel{}
- data = cresult.Data.(*model.Channel)
+ data := cresult.Data.(*model.Channel)
if !HasPermissionToChannelContext(c, data.Id, model.PERMISSION_READ_CHANNEL) {
return
}
if data.TeamId != c.TeamId && data.Type != model.CHANNEL_DIRECT {
- c.Err = model.NewLocAppError("getChannel", "api.channel.get_channel.wrong_team.app_error", map[string]interface{}{"ChannelName": channelname, "TeamId": c.TeamId}, "")
+ c.Err = model.NewLocAppError("getChannel", "api.channel.get_channel.wrong_team.app_error", map[string]interface{}{"ChannelName": channelName, "TeamId": c.TeamId}, "")
return
}
@@ -1207,7 +1206,11 @@ func removeMember(c *Context, w http.ResponseWriter, r *http.Request) {
func RemoveUserFromChannel(userIdToRemove string, removerUserId string, channel *model.Channel) *model.AppError {
if channel.DeleteAt > 0 {
- return model.NewLocAppError("updateChannel", "api.channel.remove_user_from_channel.deleted.app_error", nil, "")
+ return model.NewLocAppError("RemoveUserFromChannel", "api.channel.remove_user_from_channel.deleted.app_error", nil, "")
+ }
+
+ if channel.Name == model.DEFAULT_CHANNEL {
+ return model.NewLocAppError("RemoveUserFromChannel", "api.channel.remove.default.app_error", map[string]interface{}{"Channel": model.DEFAULT_CHANNEL}, "")
}
if cmresult := <-Srv.Store.Channel().RemoveMember(channel.Id, userIdToRemove); cmresult.Err != nil {