added validation for blocked users when inviting to groups by username (#14316)

2022-12-15 12:47:54 -08:00
parent 41cd99c920
commit 42e0bad4ac
2 changed files with 20 additions and 0 deletions
@@ -207,6 +207,13 @@ async function inviteByUserName (username, group, inviter, req, res) {
    throw new BadRequest(res.t('cannotInviteSelfToGroup'));
  }

+  const objections = inviter.getObjectionsToInteraction('group-invitation', userToInvite);
+  if (objections.length > 0) {
+    throw new NotAuthorized(res.t(
+      objections[0],
+      { userId: userToInvite._id, username: userToInvite.profile.name },
+    ));
+  }
  return addInvitationToUser(userToInvite, group, inviter, res);
 }