Add warning for user's identity validation (#1573)

* Add warning for user's identity validation * Fix lint Co-authored-by: Martin Schoeler <martin.schoeler@rocket.chat>
RocketChat · Feb 10, 2020 · 0a66a01 · 0a66a01
1 parent f2bcbe2
commit 0a66a01
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 3 deletions.
diff --git a/developer-guides/rest-api/chat/postmessage/README.md b/developer-guides/rest-api/chat/postmessage/README.md
@@ -1,5 +1,9 @@
 # Post a chat message
 
+## IMPORTANT
+
+You only can send `alias` and `avatar` properties if your user has the `bot` role. We implement this rule to avoid users to impersonate other users.
+
 | URL                        | Requires Auth | HTTP Method |
 | :------------------------- | :------------ | :---------- |
 | `/api/v1/chat.postMessage` | `yes`         | `POST`      |
@@ -138,6 +142,7 @@ curl -H "X-Auth-Token: 9HqLlyZOugoStsXCUfD_0YdwnNnunAJF8V47U3QHXSq" \
 
 | Version | Description                                                                  |
 | :------ | :--------------------------------------------------------------------------- |
+| 2.4.0   | Added validation on user's identity                                          |
 | 0.49.0  | The `channel` can now be a room's id.                                        |
 | 0.48.0  | Information about the sent message is now returned.                          |
 | 0.17.0  | Messages aren't always processed as from BOT and urls are parsed by default. |

diff --git a/developer-guides/rest-api/chat/sendmessage/README.md b/developer-guides/rest-api/chat/sendmessage/README.md
@@ -4,6 +4,10 @@ The difference between `chat.postMessage` and `chat.sendMessage` is that `chat.s
 for passing a value for `_id` and the other one doesn't. Also, `chat.sendMessage` only sends it to
 one channel whereas the other one allows for sending to more than one channel at a time.
 
+## IMPORTANT
+
+You only can send `alias` and `avatar` properties if your user has the `bot` role. We implemented this rule to avoid users to impersonate other users.
+
 | URL                        | Requires Auth | HTTP Method |
 | :------------------------- | :------------ | :---------- |
 | `/api/v1/chat.sendMessage` | `yes`         | `POST`      |
@@ -137,6 +141,7 @@ curl -H "X-Auth-Token: 9HqLlyZOugoStsXCUfD_0YdwnNnunAJF8V47U3QHXSq" \
 
 ## Change Log
 
-| Version | Description  |
-| :------ | :----------- |
-| 0.60.0  | Added        |
+| Version | Description                         |
+| :------ | :---------------------------------- |
+| 2.4.0   | Added validation on user's identity |
+| 0.60.0  | Added                               |