feat: Track attachments access (#4416)

This commit is contained in:
Tom Moor
2022-11-12 08:41:59 -08:00
committed by GitHub
parent 622f464b9f
commit 762341a4ec
3 changed files with 24 additions and 4 deletions

View File

@@ -159,11 +159,15 @@ const handleAttachmentsRedirect = async (ctx: ContextWithState) => {
rejectOnEmpty: true,
});
if (attachment.isPrivate) {
if (attachment.teamId !== user.teamId) {
throw AuthorizationError();
}
if (attachment.isPrivate && attachment.teamId !== user.teamId) {
throw AuthorizationError();
}
await attachment.update({
lastAccessedAt: new Date(),
});
if (attachment.isPrivate) {
const accessUrl = await getSignedUrl(attachment.key);
ctx.redirect(accessUrl);
} else {