fix: Users can mention here and all even without permission (#29907)

RocketChat · Jul 25, 2023 · 306a583 · 306a583
1 parent db2cc31
commit 306a583
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 2 deletions.
diff --git a/.changeset/shaggy-beans-poke.md b/.changeset/shaggy-beans-poke.md
@@ -0,0 +1,5 @@
+---
+"@rocket.chat/meteor": patch
+---
+
+Fix `mention-here` and `mention-all` permissions not being honored
diff --git a/apps/meteor/app/lib/server/startup/filterATAllTag.ts b/apps/meteor/app/lib/server/startup/filterATAllTag.ts
@@ -46,6 +46,6 @@ callbacks.add(
 
 		return message;
 	},
-	callbacks.priority.HIGH,
+	callbacks.priority.MEDIUM,
 	'filterATAllTag',
 );
diff --git a/apps/meteor/app/lib/server/startup/filterATHereTag.ts b/apps/meteor/app/lib/server/startup/filterATHereTag.ts
@@ -46,6 +46,6 @@ callbacks.add(
 
 		return message;
 	},
-	callbacks.priority.HIGH,
+	callbacks.priority.MEDIUM,
 	'filterATHereTag',
 );