improve: unable to edit the message sent by others (#22)

ChurchApps · Feb 7, 2025 · e92725d · e92725d
1 parent 2dde2bd
commit e92725d
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/controllers/MessageController.ts b/src/controllers/MessageController.ts
@@ -16,6 +16,10 @@ export class MessageController extends MessagingBaseController {
       const promises: Promise<Message>[] = [];
       req.body.forEach((message: Message) => {
         message.messageType = "message";
+        if (message?.id && message.personId !== au.personId) {
+          res.status(403).send("You can not edit the message sent by others.");
+          return;
+        }
         if (au?.id) {
           message.personId = au.personId;
           message.displayName = au.firstName + " " + au.lastName;