HMC/handmade-revolt-backend
6
0
Fork 0
forked from jmug/stoatchat
Code Pull Requests Actions Packages Releases 2 Activity

fix: also consider role ranking on setting role perm

Browse Source
This commit is contained in:
Paul Makles
2022-02-23 15:58:54 +00:00
parent 30af92bee4
commit 437a620274
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/routes/servers/permissions_set.rs
View File

@@ -22,13 +22,18 @@ pub async fn req(
let data = data.into_inner(); let data = data.into_inner();
let mut server = target.as_server(db).await?; let mut server = target.as_server(db).await?;
if let Some(current_value) = server.roles.get(&role_id).map(|x| x.permissions) { if let Some((current_value, rank)) = server.roles.get(&role_id).map(|x| (x.permissions, x.rank))
{
let mut permissions = perms(&user).server(&server); let mut permissions = perms(&user).server(&server);
permissions permissions
.throw_permission(db, Permission::ManagePermissions) .throw_permission(db, Permission::ManagePermissions)
.await?; .await?;
if rank <= permissions.get_member_rank().unwrap_or(i64::MIN) {
return Err(Error::NotElevated);
}
if !permissions if !permissions
.has_permission_value(db, data.permissions.allows()) .has_permission_value(db, data.permissions.allows())
.await? .await?