Check share restrictions on one to one conversation

Signed-off-by: Vitor Mattos <vitor@php.rio>

1 files changed, 9 insertions, 0 deletions

diff --git a/lib/Service/RoomService.php b/lib/Service/RoomService.php
index f54544b18..5a8c45e1b 100644
--- a/lib/Service/RoomService.php
+++ b/lib/Service/RoomService.php
@@ -32,6 +32,7 @@ use OCA\Talk\Participant;
 use OCA\Talk\Room;
 use OCP\EventDispatcher\IEventDispatcher;
 use OCP\IUser;
+use OCP\Share\IManager as IShareManager;
 
 class RoomService {
 
@@ -39,14 +40,18 @@ class RoomService {
 	protected $manager;
 	/** @var ParticipantService */
 	protected $participantService;
+	/** @var IShareManager */
+	protected $shareManager;
 	/** @var IEventDispatcher */
 	private $dispatcher;
 
 	public function __construct(Manager $manager,
 								ParticipantService $participantService,
+								IShareManager $shareManager,
 								IEventDispatcher $dispatcher) {
 		$this->manager = $manager;
 		$this->participantService = $participantService;
+		$this->shareManager = $shareManager;
 		$this->dispatcher = $dispatcher;
 	}
 
@@ -66,6 +71,10 @@ class RoomService {
 			$room = $this->manager->getOne2OneRoom($actor->getUID(), $targetUser->getUID());
 			$this->participantService->ensureOneToOneRoomIsFilled($room);
 		} catch (RoomNotFoundException $e) {
+			if (!$this->shareManager->currentUserCanEnumerateTargetUser($actor, $targetUser)) {
+				throw new RoomNotFoundException();
+			};
+
 			$users = [$actor->getUID(), $targetUser->getUID()];
 			sort($users);
 			$room = $this->manager->createRoom(Room::TYPE_ONE_TO_ONE, json_encode($users));