feat(perms): consistently throw correct permissions

This commit is contained in:
Paul Makles
2022-02-22 21:41:12 +00:00
parent 7befd77c5b
commit 4c40c6c2cc
33 changed files with 134 additions and 264 deletions

View File

@@ -1,18 +1,11 @@
use revolt_quark::{models::User, perms, presence::presence_filter_online, Db, Error, Ref, Result};
use revolt_quark::{models::User, perms, presence::presence_filter_online, Db, Ref, Result};
use rocket::serde::json::Value;
#[get("/<target>/members")]
pub async fn req(db: &Db, user: User, target: Ref) -> Result<Value> {
let server = target.as_server(db).await?;
if !perms(&user)
.server(&server)
.calc(db)
.await
.can_view_channel()
{
return Err(Error::NotFound);
}
perms(&user).server(&server).calc(db).await?;
let members = db.fetch_all_members(&server.id).await?;