Add backend check for ws message ownership

This commit is contained in:
shamoon
2023-08-09 08:52:23 -07:00
parent 9291c98189
commit 3b666fef77
2 changed files with 13 additions and 2 deletions

View File

@@ -146,7 +146,7 @@ export class ConsumerStatusService {
this.statusWebSocket.onmessage = (ev) => {
let statusMessage: WebsocketConsumerStatusMessage = JSON.parse(ev['data'])
// tasks are async so we rely on checking user id
// fallback if backend didnt restrict message
if (
statusMessage.owner_id &&
statusMessage.owner_id !== this.settingsService.currentUser?.id &&