18 Commits (ea9d00835480f971511d94d270b906942d2f713e)

Author	SHA1	Message	Date
Rodrigo Nascimento	ea9d008354	Convert file uploads to model style	9 years ago
Rodrigo Nascimento	06560541ec	Closes #1367; Add ability to delete files	9 years ago
Diego Sampaio	7cac1c4b2a	removed all console.logs from publishes and methods	10 years ago
Rodrigo Nascimento	831bfd8c70	Replace all ChatMessage.update	10 years ago
Rodrigo Nascimento	ef42cad738	Replace all ChatMessage.insert	10 years ago
Rodrigo Nascimento	271233b642	Replace all ChatMessage.remove	10 years ago
Rodrigo Nascimento	8dedb22795	Replace all ChatMessage.findOne	10 years ago
Rodrigo Nascimento	8aab1ea51a	Remove empty line	10 years ago
Rodrigo Nascimento	007390a4f4	Move code to use originalMessage instead message	10 years ago
Rodrigo Nascimento	e9fbad715d	Remove unecessary code	10 years ago
Rodrigo Nascimento	e920f8089e	Verify is user can delete message getting the message from db before	10 years ago
Reid Wakida	c2e6e0fa2c	Create RocketChat authorization package that handles role and permission ... based authorization Leverages alanning:roles package to associate a user to a role. Uses alanning:roles optional "group" parameter to limit the role's scope to either the global level or room level. The global level is applicable to users that can perform administrative functions. The room level is applicable to users that can perform room specific administrative functions (like a moderator). A role can have zero or more permissions. Permissions and their association to roles are defined by this package Authorization checks are based on whether or not the user has a role or permission. The roles, permissions, and their association are statically defined at this time. Eventually, there should be an API to dynamically create a role and associate it to static permission(s). Old 'isAdmin' and '.admin is true' checks have been replaced with corresponding hasPermission authorization checks. Additionally, code that automatically assigned admin privileges are updated to assign 'admin' role instead. channel/direct message/private group code checks authorization to edit properties (e.g. title) and edit/delete messages (regardless of the system level allow edit/delete settings). - user with 'admin' role are authorized to do anything - room creator is assigned 'moderator' role that can edit the room and edit/delete messages - members can only edit/delete their own messages IF system wide settings permit them to. v19 migration will - add 'admin' role to users with admin:true property - add 'moderator' role scoped to room for room creators - add 'user' role to all users. There are known issues unrelated to the changes made - If a user with edit/delete message room permissions logs out then a user without edit/delete message room permissions logs in, then they will see edit/delete icons. The server will deny execution - edit/delete icons are not reactive Thus if the system level allow edit/delete message setting is toggled, the icons will not reflect it. The server will deny execution.	10 years ago
Rodrigo Nascimento	e56c2238c3	Replace all Meteor.users.findOne	10 years ago
Marcelo Schmidt	3b6d283122	Fixed, allowing delete message by admin	10 years ago
Rodrigo Nascimento	5e3d683285	Replace stream of deleted messages by Notifications stream	10 years ago
Aaron	8a462752a7	added checks to updateMessage and deleteMessage	10 years ago
Marcelo Schmidt	9e602a6d44	Check for settings allowing/forbidding editing/deleting messages	10 years ago
Marcelo Schmidt	eb6d49a0eb	Enable edit and delete messages based on settings	10 years ago
Rodrigo Nascimento	afbb394221	Fix message deletion and fix render of previous message	10 years ago