mirror of
https://github.com/ancsemi/Haven.git
synced 2026-10-27 00:54:56 +00:00
ancsemi
56a1658b4e
remove-from-channel and the channel-scoped forms of assign-role, promote-user and revoke-role answer Channel not found for a channel the caller is not in, cannot pass the gate of, or that is a DM.
38 lines
1.4 KiB
JavaScript
38 lines
1.4 KiB
JavaScript
'use strict';
|
|
|
|
// Whether a user can reach a channel, for handlers that are handed a channel
|
|
// id or code by the client. The admin reaches every channel except a DM they
|
|
// are not part of; anyone else needs a membership row and the channel's role
|
|
// gate. Returns the channel row, or null. Any error denies.
|
|
|
|
function reachable(ctx, user, ch) {
|
|
if (!ch) return null;
|
|
const member = !!ctx.db.prepare('SELECT 1 FROM channel_members WHERE channel_id = ? AND user_id = ?').get(ch.id, user.id);
|
|
if (ch.is_dm) return member ? ch : null;
|
|
if (user.isAdmin) return ch;
|
|
if (!member) return null;
|
|
return ctx.roleGateAllows(user.id, ch) ? ch : null;
|
|
}
|
|
|
|
function reachableChannel(ctx, user, channelId) {
|
|
if (!Number.isInteger(channelId) || channelId <= 0) return null;
|
|
try {
|
|
return reachable(ctx, user, ctx.db.prepare('SELECT * FROM channels WHERE id = ?').get(channelId));
|
|
} catch (err) {
|
|
console.warn('[channel-access] check failed, denying:', err.message);
|
|
return null;
|
|
}
|
|
}
|
|
|
|
function reachableChannelByCode(ctx, user, code) {
|
|
if (typeof code !== 'string' || !/^[a-f0-9]{8}$/i.test(code)) return null;
|
|
try {
|
|
return reachable(ctx, user, ctx.db.prepare('SELECT * FROM channels WHERE code = ?').get(code));
|
|
} catch (err) {
|
|
console.warn('[channel-access] check failed, denying:', err.message);
|
|
return null;
|
|
}
|
|
}
|
|
|
|
module.exports = { reachableChannel, reachableChannelByCode };
|