Auth permission updates

Hubs-Foundation · Jun 23, 2023 · 8d1067f · 8d1067f
1 parent 56ff5a8
commit 8d1067f
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/lib/ret_web/channels/hub_channel.ex b/lib/ret_web/channels/hub_channel.ex
@@ -297,7 +297,11 @@ defmodule RetWeb.HubChannel do
     account = Guardian.Phoenix.Socket.current_resource(socket)
     hub = socket |> hub_for_socket
 
-    if (type != "photo" and type != "video") or account |> can?(spawn_camera(hub)) do
+    if (type == "photo" and type == "video" and !account |> can?(spawn_camera(hub))) or
+         (type == "permission" and !Ret.Hub.is_owner?(account.account_id)) do
+      {:noreply, socket}
+    end
+
       broadcast!(
         socket,
         event,
@@ -306,7 +310,6 @@ defmodule RetWeb.HubChannel do
         |> Map.put(:session_id, socket.assigns.session_id)
         |> payload_with_from(socket)
       )
-    end
 
     {:noreply, socket}
   end