Prevent users from seeing messages from private rooms (without password)

sdelements / lets-chat

Self-hosted chat app for small teams

http://sdelements.github.io/lets-chat

MIT License

9.76k stars 1.58k forks source link

Prevent users from seeing messages from private rooms (without password) #694

Open mrmnmly opened 8 years ago

mrmnmly commented 8 years ago

Is there any way of listing of all subscribed rooms via API?

At the moment I'm retrieving full list of rooms (even private which I don't have password to) and I'm able to retrieve messages that was sent into them (I can't only submit new messages) - how to prevent users from viewing messages from private rooms?