puniko/FoundKey
1
0
Fork 0
forked from FoundKeyGang/FoundKey
Code Issues Pull requests Projects Releases Packages Wiki Activity

fixup: actually check whether the group joining is from the user

Browse source
This commit is contained in:
Johann150 2023-01-13 21:55:14 +01:00
parent 83373e0c51
commit 3d2cfc075a
Signed by untrusted user: Johann150
GPG key ID: 9EE6577A2A06F8F1
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
packages/backend/src/models/repositories/user.ts
View file

@ -147,6 +147,8 @@ export const UserRepository = db.getRepository(User).extend({
JOIN "user_group_joining" JOIN "user_group_joining"
ON "messaging_message"."groupId" = "user_group_joining"."userGroupId" ON "messaging_message"."groupId" = "user_group_joining"."userGroupId"
WHERE WHERE
"user_group_joining"."userId" = $1
AND
"messaging_message"."userId" != $1 "messaging_message"."userId" != $1
AND AND
NOT $1 = ANY("messaging_message"."reads") NOT $1 = ANY("messaging_message"."reads")