add permissions check

2021-01-08 15:26:20 +08:00
parent 081d6fba97
commit f8faddd93e
1 changed files with 7 additions and 0 deletions
--- a/rssbot.py
+++ b/rssbot.py
@@ -600,6 +600,13 @@ class callbackQueryHandle(Thread):
            self.answer('错误的按钮数据。')
            return
        if self._loc == 0:
+            if 'message' not in self._data:
+                self.answer('找不到信息。')
+                return
+            if self._data['message']['chat']['type'] != 'private':
+                if checkUserPermissionsInChat(self._main, self._data['message']['chat']['id'], self._fromUserId) != UserPermissionsInChatCheckResult.OK:
+                    self.answer('您没有权限操作')
+                    return
            try:
                self._inlineKeyBoardCommand = InlineKeyBoardCallBack(
                    self._command)