@ -1,4 +1,4 @@
import type { IEditedMessage , IMessage } from '@rocket.chat/core-typings' ;
import type { IEditedMessage , IMessage , IUser , AtLeast } from '@rocket.chat/core-typings' ;
import { Messages , Users } from '@rocket.chat/models' ;
import type { ServerMethods } from '@rocket.chat/ui-contexts' ;
import { Match , check } from 'meteor/check' ;
@ -12,97 +12,102 @@ import { updateMessage } from '../functions/updateMessage';
const allowedEditedFields = [ 'tshow' , 'alias' , 'attachments' , 'avatar' , 'emoji' , 'msg' ] ;
declare module '@rocket.chat/ui-contexts' {
// eslint-disable-next-line @typescript-eslint/naming-convention
interface ServerMethods {
updateMessage ( message : IEditedMessage ) : void ;
export async function executeUpdateMessage ( uid : IUser [ '_id' ] , message : AtLeast < IMessage , ' _id ' | ' rid ' | ' msg ' > , previewUrls? : string [ ] ) {
const originalMessage = await Messages . findOneById ( message . _id ) ;
if ( ! originalMessage ? . _id ) {
return ;
}
}
Meteor . methods < ServerMethods > ( {
async updateMessage ( message : IEditedMessage ) {
check ( message , Match . ObjectIncluding ( { _id : String } ) ) ;
Object . entries ( message ) . forEach ( ( [ key , value ] ) = > {
if ( ! allowedEditedFields . includes ( key ) && value !== originalMessage [ key as keyof IMessage ] ) {
throw new Meteor . Error ( 'error-invalid-update-key' , ` Cannot update the message ${ key } ` , {
method : 'updateMessage' ,
} ) ;
}
} ) ;
const uid = Meteor . userId ( ) ;
const msgText = originalMessage ? . attachments ? . [ 0 ] ? . description ? ? originalMessage . msg ;
if ( msgText === message . msg && ! previewUrls ) {
return ;
}
if ( ! uid ) {
throw new Meteor . Error ( 'error-invalid-user' , 'Invalid user' , { method : 'updateMessage' } ) ;
}
if ( ! ! message . tmid && originalMessage . _id === message . tmid ) {
throw new Meteor . Error ( 'error-message-same-as-tmid' , 'Cannot set tmid the same as the _id' , {
method : 'updateMessage' ,
} ) ;
}
const originalMessage = await Messages . findOneById ( message . _id ) ;
if ( ! originalMessage ? . _id ) {
return ;
}
if ( ! originalMessage . tmid && ! ! message . tmid ) {
throw new Meteor . Error ( 'error-message-change-to-thread' , 'Cannot update message to a thread' , { method : 'updateMessage' } ) ;
}
Object . entries ( message ) . forEach ( ( [ key , value ] ) = > {
if ( ! allowedEditedFields . includes ( key ) && value !== originalMessage [ key as keyof IMessage ] ) {
throw new Meteor . Error ( 'error-invalid-update-key' , ` Cannot update the message ${ key } ` , {
method : 'updateMessage' ,
} ) ;
}
const _hasPermission = await hasPermissionAsync ( uid , 'edit-message' , message . rid ) ;
const editAllowed = settings . get ( 'Message_AllowEditing' ) ;
const editOwn = originalMessage . u && originalMessage . u . _id === uid ;
if ( ! _hasPermission && ( ! editAllowed || ! editOwn ) ) {
throw new Meteor . Error ( 'error-action-not-allowed' , 'Message editing not allowed' , {
method : 'updateMessage' ,
action : 'Message_editing' ,
} ) ;
}
const msgText = originalMessage ? . attachments ? . [ 0 ] ? . description ? ? originalMessage . msg ;
if ( msgText === message . msg ) {
return ;
}
const blockEditInMinutes = settings . get ( 'Message_AllowEditing_BlockEditInMinutes' ) ;
const bypassBlockTimeLimit = await hasPermissionAsync ( uid , 'bypass-time-limit-edit-and-delete' ) ;
if ( ! ! message . tmid && originalMessage . _id === message . tmid ) {
throw new Meteor . Error ( 'error-message-same-as-tmid' , 'Cannot set tmid the same as the _id' , {
if ( ! bypassBlockTimeLimit && Match . test ( blockEditInMinutes , Number ) && blockEditInMinutes !== 0 ) {
let currentTsDiff = 0 ;
let msgTs ;
if ( originalMessage . ts instanceof Date || Match . test ( originalMessage . ts , Number ) ) {
msgTs = moment ( originalMessage . ts ) ;
}
if ( msgTs ) {
currentTsDiff = moment ( ) . diff ( msgTs , 'minutes' ) ;
}
if ( currentTsDiff >= blockEditInMinutes ) {
throw new Meteor . Error ( 'error-message-editing-blocked' , 'Message editing is blocked' , {
method : 'updateMessage' ,
} ) ;
}
}
if ( ! originalMessage . tmid && ! ! message . tmid ) {
throw new Meteor . Error ( 'error-message-change-to-thread' , 'Cannot update message to a thread' , { method : 'updateMessage' } ) ;
}
const user = await Users . findOneById ( uid ) ;
if ( ! user ) {
throw new Meteor . Error ( 'error-invalid-user' , 'Invalid user' , { method : 'updateMessage' } ) ;
}
await canSendMessageAsync ( message . rid , { uid : user._id , username : user.username ? ? undefined , . . . user } ) ;
const _hasPermission = await hasPermissionAsync ( uid , 'edit-message' , message . rid ) ;
const editAllowed = settings . get ( 'Message_AllowEditing' ) ;
const editOwn = originalMessage . u && originalMessage . u . _id === uid ;
// It is possible to have an empty array as the attachments property, so ensure both things exist
if ( originalMessage . attachments && originalMessage . attachments . length > 0 && originalMessage . attachments [ 0 ] . description !== undefined ) {
originalMessage . attachments [ 0 ] . description = message . msg ;
message . attachments = originalMessage . attachments ;
message . msg = originalMessage . msg ;
}
if ( ! _hasPermission && ( ! editAllowed || ! editOwn ) ) {
throw new Meteor . Error ( 'error-action-not-allowed' , 'Message editing not allowed' , {
method : 'updateMessage' ,
action : 'Message_editing' ,
} ) ;
}
message . u = originalMessage . u ;
const blockEditInMinutes = settings . get ( 'Message_AllowEditing_BlockEditInMinutes' ) ;
const bypassBlockTimeLimit = await hasPermissionAsync ( uid , 'bypass-time-limit-edit-and-delete' ) ;
if ( ! bypassBlockTimeLimit && Match . test ( blockEditInMinutes , Number ) && blockEditInMinutes !== 0 ) {
let currentTsDiff = 0 ;
let msgTs ;
if ( originalMessage . ts instanceof Date || Match . test ( originalMessage . ts , Number ) ) {
msgTs = moment ( originalMessage . ts ) ;
}
if ( msgTs ) {
currentTsDiff = moment ( ) . diff ( msgTs , 'minutes' ) ;
}
if ( currentTsDiff >= blockEditInMinutes ) {
throw new Meteor . Error ( 'error-message-editing-blocked' , 'Message editing is blocked' , {
method : 'updateMessage' ,
} ) ;
}
}
return updateMessage ( message , user , originalMessage , previewUrls ) ;
}
const user = await Users . findOneById ( uid ) ;
if ( ! user ) {
throw new Meteor . Error ( 'error-invalid-user' , 'Invalid user' , { method : 'updateMessage' } ) ;
}
await canSendMessageAsync ( message . rid , { uid : user._id , username : user.username ? ? undefined , . . . user } ) ;
declare module '@rocket.chat/ui-contexts' {
// eslint-disable-next-line @typescript-eslint/naming-convention
interface ServerMethods {
updateMessage ( message : IEditedMessage , previewUrls? : string [ ] ) : void ;
}
}
// It is possible to have an empty array as the attachments property, so ensure both things exist
if ( originalMessage . attachments && originalMessage . attachments . length > 0 && originalMessage . attachments [ 0 ] . description !== undefined ) {
originalMessage . attachments [ 0 ] . description = message . msg ;
message . attachments = originalMessage . attachments ;
message . msg = originalMessage . msg ;
}
Meteor . methods < ServerMethods > ( {
async updateMessage ( message : IEditedMessage , previewUrls? : string [ ] ) {
check ( message , Match . ObjectIncluding ( { _id : String } ) ) ;
check ( previewUrls , Match . Maybe ( [ String ] ) ) ;
const uid = Meteor . userId ( ) ;
message . u = originalMessage . u ;
if ( ! uid ) {
throw new Meteor . Error ( 'error-invalid-user' , 'Invalid user' , { method : 'updateMessage' } ) ;
}
return updateMessage ( message , user , originalMessage ) ;
return exec uteU pdateMessage( uid , message , previewUrls ) ;
} ,
} ) ;
Matheus Barbosa Silva
2 years ago
committed by