feat(perms): consistently throw correct permissions

This commit is contained in:
Paul Makles
2022-02-22 21:41:12 +00:00
parent 7befd77c5b
commit 4c40c6c2cc
33 changed files with 134 additions and 264 deletions

View File

@@ -1,20 +1,13 @@
use revolt_quark::{
models::{Member, User},
perms, Db, Error, Ref, Result,
perms, Db, Ref, Result,
};
use rocket::serde::json::Json;
#[get("/<target>/members/<member>")]
pub async fn req(db: &Db, user: User, target: Ref, member: Ref) -> Result<Json<Member>> {
let server = target.as_server(db).await?;
if !perms(&user)
.server(&server)
.calc(db)
.await
.can_view_channel()
{
return Err(Error::NotFound);
}
perms(&user).server(&server).calc(db).await?;
member.as_member(db, &server.id).await.map(Json)
}