Allow MSC3030 'timestamp_to_event' calls from anyone on world-readable rooms. (#13062)
Signed-off-by: Quentin Gliech <quenting@element.io>pull/13098/head
parent
9372f6f842
commit
c6d6176411
|
@ -0,0 +1 @@
|
||||||
|
Allow MSC3030 'timestamp_to_event' calls from anyone on world-readable rooms.
|
|
@ -1177,7 +1177,9 @@ class TimestampLookupRestServlet(RestServlet):
|
||||||
self, request: SynapseRequest, room_id: str
|
self, request: SynapseRequest, room_id: str
|
||||||
) -> Tuple[int, JsonDict]:
|
) -> Tuple[int, JsonDict]:
|
||||||
requester = await self._auth.get_user_by_req(request)
|
requester = await self._auth.get_user_by_req(request)
|
||||||
await self._auth.check_user_in_room(room_id, requester.user.to_string())
|
await self._auth.check_user_in_room_or_world_readable(
|
||||||
|
room_id, requester.user.to_string()
|
||||||
|
)
|
||||||
|
|
||||||
timestamp = parse_integer(request, "ts", required=True)
|
timestamp = parse_integer(request, "ts", required=True)
|
||||||
direction = parse_string(request, "dir", default="f", allowed_values=["f", "b"])
|
direction = parse_string(request, "dir", default="f", allowed_values=["f", "b"])
|
||||||
|
|
Loading…
Reference in New Issue