fix: add elevation check to role edit route

This commit is contained in:
Paul Makles
2024-04-07 15:52:14 +01:00
parent 54a4eff623
commit aded2e3239
3 changed files with 9 additions and 0 deletions

View File

@@ -36,10 +36,12 @@ pub async fn req(
.throw_permission(db, Permission::ManagePermissions)
.await?;
// Prevent us from editing roles above us
if rank <= permissions.get_member_rank().unwrap_or(i64::MIN) {
return Err(Error::NotElevated);
}
// Ensure we have access to grant these permissions forwards
let current_value: Override = current_value.into();
permissions
.throw_permission_override(db, current_value, data.permissions)