fix: protect publish path from mysql exhaustion

server/im_security_policy_runtime_test.go

@@ -33,3 +33,18 @@ func TestYouthModeNightQuietRestrictsCalls(t *testing.T) {
 		t.Fatalf("daytime call should be allowed: %#v", decision)
 	}
 }
+
+func TestYouthModeOrdinaryMessageDoesNotReadDatabase(t *testing.T) {
+	oldSecurity := store.Security
+	security := &testSecurityStore{err: types.ErrInternal}
+	store.Security = security
+	defer func() { store.Security = oldSecurity }()
+
+	decision := imYouthModePolicyDecision(7, types.Uid(42), imYouthActionMessage, time.Now())
+	if !decision.Allowed {
+		t.Fatalf("ordinary message should continue to moderation: %#v", decision)
+	}
+	if security.youthModeReads != 0 {
+		t.Fatalf("ordinary message read youth settings %d times", security.youthModeReads)
+	}
+}