Enforce clearchat permissions in the server.

It was only being enforced in the client.
2024-05-08 15:38:51 +02:00
parent e59880e267
commit ea4f14ee0a
1 changed files with 3 additions and 0 deletions
@@ -1619,6 +1619,9 @@ func handleClientMessage(c *webClient, m clientMessage) error {
 		}
 		switch m.Kind {
 		case "clearchat":
+			if !member("op", c.permissions) {
+				return c.error(group.UserError("not authorised"))
+			}
 			g.ClearChatHistory()
 			m := clientMessage{
 				Type:       "usermessage",