From 1db56a5a26c73ca08c519e02e03f2d872bd34624 Mon Sep 17 00:00:00 2001
From: lifegpc <g1710431395@gmail.com>
Date: Fri, 8 Jan 2021 15:38:19 +0800
Subject: [PATCH] add permission check

---
 rssbot.py | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/rssbot.py b/rssbot.py
index 5b6d0c4..8fb737b 100644
--- a/rssbot.py
+++ b/rssbot.py
@@ -494,7 +494,10 @@ class messageHandle(Thread):
                 if i.find('://') > -1:
                     self._uri = i
                     break
-            if self._uri is None:
+            if self._data['chat']['type'] != "private" and checkUserPermissionsInChat(self._main, chatId, self._fromUserId) != UserPermissionsInChatCheckResult.OK:
+                di['text'] = '你没有权限操作。'
+                self._uri = None
+            elif self._uri is None:
                 di['text'] = '没有找到URL'
             else:
                 di['text'] = '正在获取信息中……'
@@ -538,6 +541,8 @@ class messageHandle(Thread):
                 media['userId'] = None
                 if self._fromUserId:
                     media['userId'] = self._fromUserId
+                if self._data['chat']['type'] != "private" and checkUserPermissionsInChat(self._main, chatId, self._fromUserId) == UserPermissionsInChatCheckResult.OK:
+                    media['chatId'] = chatId
                 self._hash = md5WithBase64(
                     f'{self._uri},{self._messageId},{self._chatId}')
                 di['text'] = getMediaInfo(media)