# HG changeset patch # User Matthew Wild # Date 1699357859 0 # Node ID d539cb48c6e933e62a9ce0eca1d604f64a955db7 # Parent 8fb8a253f0a1b8ddd1f9d2e413a9cfb36821335e mod_muc: Switch to module:could() for some implicit access control checks diff -r 8fb8a253f0a1 -r d539cb48c6e9 plugins/muc/mod_muc.lua --- a/plugins/muc/mod_muc.lua Tue Nov 07 11:12:57 2023 +0000 +++ b/plugins/muc/mod_muc.lua Tue Nov 07 11:50:59 2023 +0000 @@ -123,13 +123,13 @@ -- Monkey patch to make server admins room owners local _get_affiliation = room_mt.get_affiliation; function room_mt:get_affiliation(jid) - if module:may(":automatic-ownership", jid) then return "owner"; end + if module:could(":automatic-ownership", jid) then return "owner"; end return _get_affiliation(self, jid); end local _set_affiliation = room_mt.set_affiliation; function room_mt:set_affiliation(actor, jid, affiliation, reason, data) - if affiliation ~= "owner" and module:may(":automatic-ownership", jid) then return nil, "modify", "not-acceptable"; end + if affiliation ~= "owner" and module:could(":automatic-ownership", jid) then return nil, "modify", "not-acceptable"; end return _set_affiliation(self, actor, jid, affiliation, reason, data); end end