Skip to content

[BUG] /api/v1/users.info rooms info fails if not admin or [view-other-user-channels] set #13894

@fasttrackhost

Description

@fasttrackhost

Description:

Related to #12726 but different.

/api/v1/users.info with fields={"userRooms": 1} will only retrieve rooms if authenticating user user has role Admin or Permission "[view-other-user-channels]" enabled. That's kind of strange, considering user can see his active rooms in chat window, why REST-API is not giving same user rooms info?? Is [view-other-user-channels] ignored in chat window, but it is checked if using REST-API??

Please add a confirmation message when ticking to change a permission. There is no "Save" button, and when you click on any checkbox you don't know if change was made.

Expected behavior:

As in RocketChat window a user can see the rooms he is active in (public, private and direct), REST-API should do the same.

Actual behavior:

In RocketChat window a user can see the rooms he is active in (public, private and direct), but not in REST-API. You must Tick to Enable the Permission set [view-other-user-channels]

Server Setup Information:

Version of Rocket.Chat Server: 0.74.2
Operating System: Linux x64, Ubuntu 18.04
Deployment Method: snap
Number of Running Instances: 1
NodeJS Version: v8.11.4

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions