userListチャンネルのオーナーチェック Fix #5772 (#5773)

* userListチャンネルのオーナーチェック Fix #5772

* comment
This commit is contained in:
MeiMei 2020-01-27 05:36:59 +09:00 committed by syuilo
parent 4441a0857b
commit 2e6e3c351d

View file

@ -1,6 +1,6 @@
import autobind from 'autobind-decorator';
import Channel from '../channel';
import { Notes, UserListJoinings } from '../../../../models';
import { Notes, UserListJoinings, UserLists } from '../../../../models';
import shouldMuteThisNote from '../../../../misc/should-mute-this-note';
import { User } from '../../../../models/entities/user';
import { PackedNote } from '../../../../models/repositories/note';
@ -17,6 +17,13 @@ export default class extends Channel {
public async init(params: any) {
this.listId = params.listId as string;
// Check existence and owner
const list = await UserLists.findOne({
id: this.listId,
userId: this.user!.id
});
if (!list) return;
// Subscribe stream
this.subscriber.on(`userListStream:${this.listId}`, this.send);