summary refs log tree commit diff
path: root/synapse/api/auth.py
diff options
context:
space:
mode:
authorMark Haines <mark.haines@matrix.org>2015-04-20 16:24:21 +0100
committerMark Haines <mark.haines@matrix.org>2015-04-20 16:24:21 +0100
commitdb8d4e8dd686300adee10ab7bf23b0af7ab3bad5 (patch)
treecfb96f8d15d411ac702208a320b0777456532186 /synapse/api/auth.py
parentImplement v2 key lookup (diff)
parentMerge branch 'master' of github.com:matrix-org/synapse into develop (diff)
downloadsynapse-db8d4e8dd686300adee10ab7bf23b0af7ab3bad5.tar.xz
Merge branch 'develop' into key_distribution
Diffstat (limited to 'synapse/api/auth.py')
-rw-r--r--synapse/api/auth.py23
1 files changed, 10 insertions, 13 deletions
diff --git a/synapse/api/auth.py b/synapse/api/auth.py

index 18f3d117b3..e159e4503f 100644 --- a/synapse/api/auth.py +++ b/synapse/api/auth.py
@@ -215,17 +215,20 @@ class Auth(object): else: ban_level = 50 # FIXME (erikj): What should we do here? - if Membership.INVITE == membership: - # TODO (erikj): We should probably handle this more intelligently - # PRIVATE join rules. - - # Invites are valid iff caller is in the room and target isn't. + if Membership.JOIN != membership: + # JOIN is the only action you can perform if you're not in the room if not caller_in_room: # caller isn't joined raise AuthError( 403, "%s not in room %s." % (event.user_id, event.room_id,) ) - elif target_banned: + + if Membership.INVITE == membership: + # TODO (erikj): We should probably handle this more intelligently + # PRIVATE join rules. + + # Invites are valid iff caller is in the room and target isn't. + if target_banned: raise AuthError( 403, "%s is banned from the room" % (target_user_id,) ) @@ -251,13 +254,7 @@ class Auth(object): raise AuthError(403, "You are not allowed to join this room") elif Membership.LEAVE == membership: # TODO (erikj): Implement kicks. - - if not caller_in_room: # trying to leave a room you aren't joined - raise AuthError( - 403, - "%s not in room %s." % (target_user_id, event.room_id,) - ) - elif target_banned and user_level < ban_level: + if target_banned and user_level < ban_level: raise AuthError( 403, "You cannot unban user &s." % (target_user_id,) )