deblan-mirror/mautrix-go
1
0
Fork 0
mirror of https://mau.dev/mautrix/go.git synced 2026-03-14 14:25:53 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

federation/eventauth: fix checking user power level changes

Browse source
This commit is contained in:
Tulir Asokan 2025-09-26 23:26:17 +03:00
commit ae6a0b4f51
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
federation/eventauth/eventauth.go
View file

@ -664,8 +664,9 @@ func allowPowerChangeMap(roomVersion id.RoomVersion, maxVal int, path, ownID str
newVal := new.Get(exgjson.Path(key.Str))
err = allowPowerChange(roomVersion, maxVal, path+"."+key.Str, value, newVal)
if err == nil && ownID != "" && key.Str != ownID {
val := parseIntWithVersion(roomVersion, value)
if *val >= maxVal {
parsedOldVal := parseIntWithVersion(roomVersion, value)
parsedNewVal := parseIntWithVersion(roomVersion, newVal)
if *parsedOldVal >= maxVal && *parsedOldVal != *parsedNewVal {
err = fmt.Errorf("%w: can't change users.%s from %s to %s with sender level %d", ErrInvalidPowerChange, key.Str, stringifyForError(value), stringifyForError(newVal), maxVal)
}
}