jmbwell/rsbbs
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

prohibit reading others' private messages

Browse Source
This commit is contained in:
John Burwell 2023-05-02 13:38:00 -05:00
parent 6f7317d58f
commit 7cd05c6af6
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
rsbbs/plugins/read/plugin.py
View File

@ -43,7 +43,13 @@ class Plugin():
with self.api.controller.session() as session: with self.api.controller.session() as session:
try: try:
statement = sqlalchemy.select(Message).where( statement = sqlalchemy.select(Message).where(
Message.id == number) sqlalchemy.or_(
sqlalchemy.and_(
Message.id == number,
Message.recipient == self.api.user.callsign),
sqlalchemy.and_(
Message.id == number,
sqlalchemy.not_(Message.is_private))))
result = session.execute(statement).one() result = session.execute(statement).one()
self.api.print_message(result) self.api.print_message(result)
logging.info(f"read message") logging.info(f"read message")