[FIX] New specific endpoint for contactChatHistoryMessages with right permissions

app/livechat/client/views/app/tabbar/contactChatHistoryMessages.js

@@ -92,7 +92,7 @@ Template.contactChatHistoryMessages.onCreated(function() {
 			return this.loadMessages(`chat.search/?roomId=${ this.rid }&searchText=${ searchTerm }&count=${ limit }&offset=${ offset }&sort={"ts": 1}`);
 		}
 
-		this.loadMessages(`channels.messages/?roomId=${ this.rid }&count=${ limit }&offset=${ offset }&sort={"ts": 1}&query={"$or": [ {"t": {"$exists": false} }, {"t": "livechat-close"} ] }`);
+		this.loadMessages(`livechat/${ this.rid }/messages?count=${ limit }&offset=${ offset }&sort={"ts": 1}&query={"$or": [ {"t": {"$exists": false} }, {"t": "livechat-close"} ] }`);
 	});
 
 	this.autorun(() => {

app/livechat/imports/server/rest/visitors.js

@@ -2,6 +2,9 @@
 import { Match, check } from 'meteor/check';
 
 import { API } from '../../../../api/server';
+import { LivechatRooms, Messages, Users } from '../../../../models/server';
+import { normalizeMessagesForUser } from '../../../../utils/server/lib/normalizeMessagesForUser';
+import { canAccessRoom, hasPermission } from '../../../../authorization';
 import { findVisitorInfo, findVisitedPages, findChatHistory, searchChats, findVisitorsToAutocomplete, findVisitorsByEmailOrPhoneOrNameOrUsername } from '../../../server/api/lib/visitors';
 
 API.v1.addRoute('livechat/visitors.info', { authRequired: true }, {
@@ -62,6 +65,50 @@ API.v1.addRoute('livechat/visitors.chatHistory/room/:roomId/visitor/:visitorId',
 	},
 });
 
+API.v1.addRoute('livechat/:rid/messages', { authRequired: true }, {
+	get() {
+		check(this.urlParams, {
+			rid: String,
+		});
+		const { offset, count } = this.getPaginationItems();
+		const { sort, query } = this.parseJsonQuery();
+
+		if (!hasPermission(this.userId, 'view-l-room')) {
+			throw new Error('error-not-authorized');
+		}
+
+		const room = LivechatRooms.findOneById(this.urlParams.rid);
+		const user = Users.findOneById(this.userId, { fields: { _id: 1 } });
+
+		if (!room) {
+			throw new Error('invalid-room');
+		}
+
+		if (!canAccessRoom(room, user)) {
+			throw new Error('error-not-allowed');
+		}
+
+		const ourQuery = { ...query, rid: this.urlParams.rid };
+
+		const cursor = Messages.find(ourQuery, {
+			sort: sort || { ts: -1 },
+			skip: offset,
+			limit: count,
+		});
+
+		const total = cursor.count();
+
+		const messages = cursor.fetch();
+
+		return API.v1.success({
+			messages: normalizeMessagesForUser(messages, this.userId),
+			offset,
+			count,
+			total,
+		});
+	},
+});
+
 API.v1.addRoute('livechat/visitors.searchChats/room/:roomId/visitor/:visitorId', { authRequired: true }, {
 	get() {
 		check(this.urlParams, {

app/livechat/server/api/lib/visitors.js

@@ -1,5 +1,5 @@
 import { hasPermissionAsync } from '../../../../authorization/server/functions/hasPermission';
-import { LivechatVisitors, Messages, LivechatRooms } from '../../../../models/server/raw';
+import { LivechatVisitors, Messages as MessagesRaw, LivechatRooms } from '../../../../models/server/raw';
 import { canAccessRoomAsync } from '../../../../authorization/server/functions/canAccessRoom';
 
 export async function findVisitorInfo({ userId, visitorId }) {
@@ -25,7 +25,7 @@ export async function findVisitedPages({ userId, roomId, pagination: { offset, c
 	if (!room) {
 		throw new Error('invalid-room');
 	}
-	const cursor = Messages.findByRoomIdAndType(room._id, 'livechat_navigation_history', {
+	const cursor = MessagesRaw.findByRoomIdAndType(room._id, 'livechat_navigation_history', {
 		sort: sort || { ts: -1 },
 		skip: offset,
 		limit: count,
@@ -72,6 +72,7 @@ export async function findChatHistory({ userId, roomId, visitorId, pagination: {
 		total,
 	};
 }
+
 export async function searchChats({ userId, roomId, visitorId, searchText, closedChatsOnly, servedChatsOnly: served, pagination: { offset, count, sort } }) {
 	if (!await hasPermissionAsync(userId, 'view-l-room')) {
 		throw new Error('error-not-authorized');

client/contexts/ServerContext/endpoints/v1/omnichannel.ts

@@ -1,6 +1,7 @@
 import { ILivechatDepartment } from '../../../../../definition/ILivechatDepartment';
 import { ILivechatMonitor } from '../../../../../definition/ILivechatMonitor';
 import { ILivechatTag } from '../../../../../definition/ILivechatTag';
+import { IMessage } from '../../../../../definition/IMessage';
 import { IOmnichannelCannedResponse } from '../../../../../definition/IOmnichannelCannedResponse';
 import { IOmnichannelRoom, IRoom } from '../../../../../definition/IRoom';
 import { ISetting } from '../../../../../definition/ISetting';
@@ -90,6 +91,14 @@ export type OmnichannelEndpoints = {
 			total: number;
 		};
 	};
+	'livechat/:rid/messages': {
+		GET: (params: { query: string; sort?: string; offset?: number; count?: number }) => {
+			messages: IMessage[];
+			count: number;
+			offset: number;
+			total: number;
+		};
+	};
 	'livechat/users/agent': {
 		GET: (params: { text?: string; offset?: number; count?: number; sort?: string }) => {
 			users: {