From eabd0b231418a6f78c8bdb0ed21e13187a5641d1 Mon Sep 17 00:00:00 2001
From: Denis Arh <denis.arh@kendu.si>
Date: Thu, 15 Nov 2018 17:14:17 +0100
Subject: [PATCH] Tweak security rules for channel fetching

---
 sam/service/channel.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sam/service/channel.go b/sam/service/channel.go
index a9df3e88d..655d4b287 100644
--- a/sam/service/channel.go
+++ b/sam/service/channel.go
@@ -808,7 +808,7 @@ func (svc *channel) setPermissionFlags(ch *types.Channel) (err error) {
 
 	ch.CanJoin = (ch.IsValid() && isPublic) || isOwner
 	ch.CanPart = isMember
-	ch.CanObserve = ch.CanJoin
+	ch.CanObserve = (ch.IsValid() && isPublic) || isMember
 	ch.CanSendMessages = ch.CanObserve && isMember
 	ch.CanDeleteMessages = isOwner
 	ch.CanChangeMembers = isOwner