Browse Source

fix: check permissions for edit

ayn2op 7 months ago
parent
commit
9e5c5aac5a
1 changed files with 6 additions and 0 deletions
  1. 6 0
      cmd/messages_list.go

+ 6 - 0
cmd/messages_list.go

@@ -568,6 +568,12 @@ func (ml *messagesList) edit() {
 		return
 	}
 
+	clientID := discordState.Ready().User.ID
+	if message.Author.ID != clientID {
+		slog.Error("failed to edit message; not the author", "channel_id", message.ChannelID, "message_id", message.ID)
+		return
+	}
+
 	app.messageInput.SetTitle("Editing")
 	app.messageInput.edit = true
 	app.messageInput.SetText(message.Content, true)