From b4fce52f518949cf166c5654e4d1aabc63589442 Mon Sep 17 00:00:00 2001 From: jgreen Date: Wed, 3 Aug 2016 14:02:04 -0600 Subject: [PATCH] added private messages creation --- server/restapi/restapi.coffee | 25 ++++++++++++++++++++++++- 1 file changed, 24 insertions(+), 1 deletion(-) diff --git a/server/restapi/restapi.coffee b/server/restapi/restapi.coffee index ee0e2e79047..29cbc15c8c3 100644 --- a/server/restapi/restapi.coffee +++ b/server/restapi/restapi.coffee @@ -419,4 +419,27 @@ Api.addRoute 'removeOutgoingWebhook', authRequired: true, else console.log '[restapi] api/outgoingWebhooks -> '.red, "User does not have 'bulk-create-c' permission" statusCode: 403 - body: status: 'error', message: 'You do not have permission to do this' \ No newline at end of file + body: status: 'error', message: 'You do not have permission to do this' + +Api.addRoute 'createDirectMessage', authRequired: true, + post: + #roleRequired: ['testagent', 'adminautomation'] + action: -> + a=@bodyParams.username + # user must also have create-c permission + if RocketChat.authz.hasPermission(@userId, 'bulk-create-c') + try + this.response.setTimeout (1000) + Meteor.runAsUser this.userId, () => + Meteor.call 'createDirectMessage', @bodyParams.username + status: 'success', created : @bodyParams.username + catch e + statusCode:400 # bad request + body: status: 'bad request missing pramas ' + @bodyParams.username, message: e.name + ':: ' + e.message + else + console.log '[restapi] api/createDirectMessage -> '.red, "User does not have 'bulk-create-c' permission" + statusCode: 403 + body: status: 'error', message: 'You do not have permission to do this' + + + \ No newline at end of file