send_message_backend: Return error on messages with no recipients.

(imported from commit 4cf9bac8eb6e35dde0510afe4efb8ba70c86b566)
This commit is contained in:
Tim Abbott 2012-11-15 11:29:32 -05:00
parent 17f55441b5
commit 5467678a2e
1 changed files with 4 additions and 1 deletions

View File

@ -511,6 +511,9 @@ def send_message_backend(request, user_profile, client_name,
if forged and not is_super_user: if forged and not is_super_user:
return json_error("User not authorized for this query") return json_error("User not authorized for this query")
if len(message_to) == 0:
return json_error("Message must have recipients.")
if client_name == "zephyr_mirror": if client_name == "zephyr_mirror":
# Here's how security works for non-superuser mirroring: # Here's how security works for non-superuser mirroring:
# #
@ -539,7 +542,7 @@ def send_message_backend(request, user_profile, client_name,
if message_type_name == 'stream': if message_type_name == 'stream':
if "subject" not in request.POST: if "subject" not in request.POST:
return json_error("Missing subject") return json_error("Missing subject")
if len(message_to) != 1: if len(message_to) > 1:
return json_error("Cannot send to multiple streams") return json_error("Cannot send to multiple streams")
stream_name = message_to[0].strip() stream_name = message_to[0].strip()
subject_name = request.POST['subject'].strip() subject_name = request.POST['subject'].strip()