github/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-08 08:21:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(telegram): fail closed on empty group allowFrom override

Browse Source
This commit is contained in:
Brian Mendonca
2026-02-24 18:30:21 -07:00
committed by Ayaan Zaidi
parent 81752564e9
commit 6bc7544a6a
3 changed files with 84 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/telegram/group-access.ts
View File

@@ -42,6 +42,11 @@ export const evaluateTelegramGroupBaseAccess = (params: {
return { allowed: true };
}
// Explicit per-group/topic allowFrom override must fail closed when empty.
if (!params.effectiveGroupAllow.hasEntries) {
return { allowed: false, reason: "group-override-unauthorized" };
}
const senderId = params.senderId ?? "";
if (params.requireSenderForAllowOverride && !senderId) {
return { allowed: false, reason: "group-override-unauthorized" };