feat(users): implement relationships, DMs, proper perms

src/routes/users/fetch_profile.rs

@@ -1,9 +1,19 @@
-use revolt_quark::{Error, Result};
+//! Fetch another user's profile
+//! 
+//! Will fail if the authenticated user does not
+//! have permission to access the other user's profile.
 
-use mongodb::bson::doc;
-use rocket::serde::json::Value;
+use revolt_quark::{Ref, Result, Error, models::{User, user::UserProfile}, perms, Database};
+
+use rocket::{serde::json::Json, State};
 
 #[get("/<target>/profile")]
-pub async fn req(/*user: UserRef, target: Ref*/ target: String) -> Result<Value> {
-    todo!()
+pub async fn req(db: &State<Database>, user: User, target: Ref) -> Result<Json<UserProfile>> {
+    let target = target.as_user(db).await?;
+
+    if perms(&user).user(&target).calc_user(db).await.get_view_profile() {
+        Ok(Json(target.profile.unwrap_or_default()))
+    } else {
+        Err(Error::NotFound)
+    }
 }