From 8b79c26a87daee86a584b9dee5994ef37f4e985a Mon Sep 17 00:00:00 2001 From: Denis Arh Date: Mon, 20 May 2019 19:17:21 +0200 Subject: [PATCH] Fix attachment access-control --- messaging/internal/service/attachment.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/messaging/internal/service/attachment.go b/messaging/internal/service/attachment.go index db976f0be..b47640875 100644 --- a/messaging/internal/service/attachment.go +++ b/messaging/internal/service/attachment.go @@ -122,7 +122,7 @@ func (svc attachment) Create(name string, size int64, fh io.ReadSeeker, channelI if ch, err := svc.channel.FindByID(channelId); err != nil { return nil, err - } else if svc.ac.CanAttachMessage(svc.ctx, ch) { + } else if !svc.ac.CanAttachMessage(svc.ctx, ch) { return nil, ErrNoPermissions.withStack() }