diff options
| author | Madeline <46743919+MaddyUnderStars@users.noreply.github.com> | 2022-09-24 23:53:30 +1000 |
|---|---|---|
| committer | Madeline <46743919+MaddyUnderStars@users.noreply.github.com> | 2022-09-24 23:53:30 +1000 |
| commit | d113f447fdc469ba6772135ce48aaea770bffdc8 (patch) | |
| tree | ae0587f780c7c4748f4a734db35b218911d50409 /api/src | |
| parent | Typeorm redis cache (diff) | |
| download | server-d113f447fdc469ba6772135ce48aaea770bffdc8.tar.xz | |
Fix default rights sucking, fix patch /guilds/:id/members/:id not checking perm for nick
Diffstat (limited to 'api/src')
| -rw-r--r-- | api/src/routes/guilds/#guild_id/members/#member_id/index.ts | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/api/src/routes/guilds/#guild_id/members/#member_id/index.ts b/api/src/routes/guilds/#guild_id/members/#member_id/index.ts index 2ff89eae..b6314ec0 100644 --- a/api/src/routes/guilds/#guild_id/members/#member_id/index.ts +++ b/api/src/routes/guilds/#guild_id/members/#member_id/index.ts @@ -35,7 +35,10 @@ router.patch("/", route({ body: "MemberChangeSchema" }), async (req: Request, re member.roles = body.roles.map((x) => new Role({ id: x })); // foreign key constraint will fail if role doesn't exist } - if (body.nick) member.nick = body.nick; + if (body.nick) { + permission.hasThrow(req.user_id == member.user.id ? "CHANGE_NICKNAME" : "MANAGE_NICKNAMES"); + member.nick = body.nick; + } await member.save(); |