upstream-mattermost/server/channels/api4/limits.go

// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
// See LICENSE.txt for license information.

package api4

import (
	"encoding/json"
	"net/http"

	"github.com/mattermost/mattermost/server/public/model"

	"github.com/mattermost/mattermost/server/public/shared/mlog"
)

func (api *API) InitLimits() {
	api.BaseRoutes.Limits.Handle("/server", api.APISessionRequired(getServerLimits)).Methods(http.MethodGet)
}

func getServerLimits(c *Context, w http.ResponseWriter, r *http.Request) {
	isAdmin := c.IsSystemAdmin() && c.App.SessionHasPermissionTo(*c.AppContext.Session(), model.PermissionSysconsoleReadUserManagementUsers)

	// Only admins receive (and need) the user/guest counts, so only compute them for
	// admins. This keeps the expensive count queries off the per-login/per-refresh hot
	// path that non-admin clients hit via loadMe()/loadConfigAndMe().
	serverLimits, err := c.App.GetServerLimits(isAdmin)
	if err != nil {
		c.Err = err
		return
	}

	// Non-admin users only get message history limit information, no user count data
	if !isAdmin {
		limitedData := &model.ServerLimits{
			MaxUsersLimit:           0,
			MaxUsersHardLimit:       0,
			ActiveUserCount:         0,
			SingleChannelGuestCount: 0,
			SingleChannelGuestLimit: 0,
			LastAccessiblePostTime:  serverLimits.LastAccessiblePostTime,
			PostHistoryLimit:        serverLimits.PostHistoryLimit,
		}
		serverLimits = limitedData
	}

	if err := json.NewEncoder(w).Encode(serverLimits); err != nil {
		c.Logger.Warn("Error writing server limits response", mlog.Err(err))
	}
}