mirror of
https://github.com/simplex-chat/simplex-chat.git
synced 2026-11-05 12:47:43 +00:00
Narasimha-sc
df36fc8c4a
APIAcceptMember chose between "advance a pending member per group policy" and "a moderator admits a member past admission review" using only the member's current status. The directory bot is a group admin and called the same command, so when a member was already pending review at the moment the bot's approval ran (a prior approval by the bot itself, from a queued event, already advanced them), the bot's approval silently ran the full-admit branch - admitting the member past admission review (visible to everyone, able to send) in a plain p2p group with review still correctly enabled. Add screeningApproval to APIAcceptMember: the directory bot passes True and can only advance a pending-approval member per policy, never admit past review (a no-op on a pending-review member); human moderators (screeningApproval=False, the default; screening=on in the parser sets True) keep the full behaviour. Backward compatible - apps send /_accept member as a string command.