Allow MSC3030 'timestamp_to_event' calls from anyone on world-readabl…

…e rooms. (#13062) Signed-off-by: Quentin Gliech <[email protected]>
matrix-org · Jun 17, 2022 · c6d6176 · c6d6176
1 parent 9372f6f
commit c6d6176
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/changelog.d/13062.misc b/changelog.d/13062.misc
@@ -0,0 +1 @@
+Allow MSC3030 'timestamp_to_event' calls from anyone on world-readable rooms.
diff --git a/synapse/rest/client/room.py b/synapse/rest/client/room.py
@@ -1177,7 +1177,9 @@ async def on_GET(
         self, request: SynapseRequest, room_id: str
     ) -> Tuple[int, JsonDict]:
         requester = await self._auth.get_user_by_req(request)
-        await self._auth.check_user_in_room(room_id, requester.user.to_string())
+        await self._auth.check_user_in_room_or_world_readable(
+            room_id, requester.user.to_string()
+        )
 
         timestamp = parse_integer(request, "ts", required=True)
         direction = parse_string(request, "dir", default="f", allowed_values=["f", "b"])
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		Allow MSC3030 'timestamp_to_event' calls from anyone on world-readable rooms.