Initial implementation of an 'invite' power_level

2015-04-21 20:56:08 +01:00 · 2015-04-21 20:56:08 +01:00 · bc41f0398f
parent d3309933f5
commit bc41f0398f
1 changed files with 7 additions and 0 deletions
--- a/synapse/api/auth.py
+++ b/synapse/api/auth.py
@ -232,6 +232,13 @@ class Auth(object):
            elif target_in_room:  # the target is already in the room.
                raise AuthError(403, "%s is already in the room." %
                                     target_user_id)
+            else:
+                invite_level = self._get_named_level(auth_events, "invite", 0)
+
+                if user_level < invite_level:
+                    raise AuthError(
+                        403, "You cannot invite user %s." % target_user_id
+                    )
        elif Membership.JOIN == membership:
            # Joins are valid iff caller == target and they were:
            # invited: They are accepting the invitation