RocketChat/Rocket.Chat

import { Authorization, MeteorError } from '@rocket.chat/core-services';
import { type IMessage, type IUser } from '@rocket.chat/core-typings';

import { i18n } from '../../../lib/i18n';

export class BeforeSavePreventMention {
    async preventMention({
        message,
        user,
        mention,
        permission,
    }: {
        message: IMessage;
        user: Pick<IUser, '_id' | 'username' | 'name' | 'language'>;
        mention: 'here' | 'all';
        permission: string;
    }): Promise<boolean> {
        if (!message.mentions?.some(({ _id }) => _id === mention)) {
            return true;
        }

        // Check if the user has permissions to use @all in both global and room scopes.
        if (await Authorization.hasPermission(message.u._id, permission)) {
            return true;
        }

        if (await Authorization.hasPermission(message.u._id, permission, message.rid)) {
            return true;
        }

        const action = i18n.t('Notify_all_in_this_room', { lng: user.language });

        // Also throw to stop propagation of 'sendMessage'.
        throw new MeteorError('error-action-not-allowed', `Notify ${mention} in this room not allowed`, {
            action,
        });
    }
}