Make sure that clients can't access buffers belonging to other users

[quassel.git] / src / core / SQL / PostgreSQL / 16 / select_buffer_by_id.sql

diff --git a/src/core/SQL/PostgreSQL/16/select_buffer_by_id.sql b/src/core/SQL/PostgreSQL/16/select_buffer_by_id.sql
index 09f202e..cccfa7c 100644 (file)
--- a/src/core/SQL/PostgreSQL/16/select_buffer_by_id.sql
+++ b/src/core/SQL/PostgreSQL/16/select_buffer_by_id.sql
@@ -1,3 +1,3 @@
 SELECT bufferid, networkid, buffertype, groupid, buffername
 FROM buffer
 SELECT bufferid, networkid, buffertype, groupid, buffername
 FROM buffer

-WHERE bufferid = :bufferid
+WHERE userid = :userid AND bufferid = :bufferid