瀏覽代碼

fix: check permissions for edit

ayn2op 7 月之前
父節點
當前提交
9e5c5aac5a
共有 1 個文件被更改,包括 6 次插入0 次删除
  1. 6 0
      cmd/messages_list.go

+ 6 - 0
cmd/messages_list.go

@@ -568,6 +568,12 @@ func (ml *messagesList) edit() {
 		return
 	}
 
+	clientID := discordState.Ready().User.ID
+	if message.Author.ID != clientID {
+		slog.Error("failed to edit message; not the author", "channel_id", message.ChannelID, "message_id", message.ID)
+		return
+	}
+
 	app.messageInput.SetTitle("Editing")
 	app.messageInput.edit = true
 	app.messageInput.SetText(message.Content, true)