RocketChat / RocketChat/Rocket.Chat
View channel history
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 46.1k
- Forks
- 13.9k
- Avg merge
- 3d 3h
- Merged PRs (30d)
- 130
Description
Hi Rocket Chat team,
I have adjusted user permissions so only users with role = admin have the view_history permission enabled. However, I'm testing users with roles other than admin, i.e. that do not include this permission, yet, when they are added to an existing thread, they are able to view all channel / discussion history.
I reviewed this issue, but I seem to be having the opposite problem.
I am using:
Rocket Chat Version 1.2.3
Apps Engine Version 1.4.2
Any thoughts about how to troubleshoot? Am I missing a detail?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce the report using Rocket.Chat 1.2.3 and Apps Engine 1.4.2: restrict view_history to admins, add a non-admin user to an existing thread, and check the visible channel or discussion history. Done means users without view_history cannot see prior history, or the issue is narrowed to a specific permission or configuration detail.
Written by the indexing model from the issue text.
Assessment
- Domain
- authorization
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100