From a1ab50bd2d728d83d43f2a4aeb9bffedfb7ed635 Mon Sep 17 00:00:00 2001
From: barisusakli <barisusakli@gmail.com>
Date: Tue, 15 Dec 2015 19:34:48 +0200
Subject: [PATCH] check admin and priv groups

---
 src/socket.io/groups.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/socket.io/groups.js b/src/socket.io/groups.js
index 3b12693be0..b7e8a9c51e 100644
--- a/src/socket.io/groups.js
+++ b/src/socket.io/groups.js
@@ -22,6 +22,10 @@ SocketGroups.join = function(socket, data, callback) {
 		return callback(new Error('[[error:invalid-uid]]'));
 	}
 
+	if (data.groupName === 'administrators' || groups.isPrivilegeGroup(data.groupName)) {
+		return callback(new Error('[[error:not-allowed]]'));
+	}
+
 	groups.exists(data.groupName, function(err, exists) {
 		if (err || !exists) {
 			return callback(err || new Error('[[error:no-group]]'));