{"record":{"id":"fbc85edde708e133","repo":"RocketChat/Rocket.Chat","slug":"not-enough-permission","errorCode":null,"errorMessage":"Not enough permission","messagePattern":"Not enough permission","errorType":"exception","errorClass":"Error","httpStatus":null,"severity":"error","filePath":"apps/meteor/server/lib/messages/sendMessage.ts","lineNumber":173,"sourceCode":"\t\tobjectMaybeIncluding({\n\t\t\t_id: String,\n\t\t\tmsg: String,\n\t\t\ttext: String,\n\t\t\talias: String,\n\t\t\temoji: String,\n\t\t\ttmid: String,\n\t\t\ttshow: Boolean,\n\t\t\tavatar: validPartialURLParam,\n\t\t\tattachments: [Match.Any],\n\t\t\tblocks: [Match.Any],\n\t\t}),\n\t);\n\n\tif (message.alias || message.avatar) {\n\t\tconst isLiveChatGuest = !message.avatar && user.token && user.token === room.v?.token;\n\n\t\tif (!isLiveChatGuest && !(await hasPermissionAsync(user._id, 'message-impersonate', room._id))) {\n\t\t\tthrow new Error('Not enough permission');\n\t\t}\n\t}\n\n\tif (Array.isArray(message.attachments) && message.attachments.length) {\n\t\tvalidateBodyAttachments(message.attachments);\n\t}\n\n\tif (message.customFields) {\n\t\tvalidateCustomMessageFields({\n\t\t\tcustomFields: message.customFields,\n\t\t\tmessageCustomFieldsEnabled: settings.get<boolean>('Message_CustomFields_Enabled'),\n\t\t\tmessageCustomFields: settings.get<string>('Message_CustomFields'),\n\t\t});\n\t}\n};\n\nexport function prepareMessageObject(\n\tmessage: Partial<IMessage>,","sourceCodeStart":155,"sourceCodeEnd":191,"githubUrl":"https://github.com/RocketChat/Rocket.Chat/blob/b2c16d5842cbe6b69b59bdf6fc5e5f1afcd1f0b0/apps/meteor/server/lib/messages/sendMessage.ts#L155-L191","documentation":"Error \"Not enough permission\" thrown in RocketChat/Rocket.Chat.","triggerScenarios":"Thrown at apps/meteor/server/lib/messages/sendMessage.ts:173 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Grant the user the 'message-impersonate' permission in the room before setting a custom alias or avatar on the message.","Send the message without the alias/avatar impersonation fields."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"b2c16d5842cbe6b69b59bdf6fc5e5f1afcd1f0b0","analyzedAt":"2026-08-18T15:26:39.429Z","contentChangedAt":"2026-08-18T15:26:39.429Z","schemaVersion":2},"datasetVersion":"2026-09-14T00:17:10.932Z"}