diff --git a/src/routes/users/find_mutual.rs b/src/routes/users/find_mutual.rs index 202720d5..dab8ee7c 100644 --- a/src/routes/users/find_mutual.rs +++ b/src/routes/users/find_mutual.rs @@ -22,6 +22,10 @@ pub struct MutualResponse { pub async fn req(db: &State, user: User, target: Ref) -> Result> { let target = target.as_user(db).await?; + if target.id == user.id { + return Err(Error::InvalidOperation); + } + if perms(&user) .user(&target) .calc_user(db)