Fixing behavour of /playbook add slash command. (#1898)

mattermost · Mar 27, 2024 · 66f254e · 66f254e
1 parent 2e9752a
commit 66f254e
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/server/command/command.go b/server/command/command.go
@@ -815,6 +815,17 @@ func (r *Runner) actionAdd(args []string) {
 		return
 	}
 
+	post, err := r.pluginAPI.Post.GetPost(postID)
+	if err != nil {
+		r.warnUserAndLogErrorf("Error: %v", err)
+		return
+	}
+
+	if !r.pluginAPI.User.HasPermissionToChannel(r.args.UserId, post.ChannelId, model.PermissionReadChannel) {
+		r.warnUserAndLogErrorf("Error no permission to post specified")
+		return
+	}
+
 	requesterInfo, err := app.GetRequesterInfo(r.args.UserId, r.pluginAPI)
 	if err != nil {
 		r.warnUserAndLogErrorf("Error: %v", err)