diff --git a/src/routes/servers/ban_create.rs b/src/routes/servers/ban_create.rs index b54d68ca..aec2f53e 100644 --- a/src/routes/servers/ban_create.rs +++ b/src/routes/servers/ban_create.rs @@ -30,6 +30,14 @@ pub async fn req(user: User, server: Ref, target: Ref, data: Json) -> Resu } let target = target.fetch_user().await?; + if target.id == user.id { + return Err(Error::InvalidOperation) + } + + if target.id == server.owner { + return Err(Error::MissingPermission) + } + let mut document = doc! { "_id": { "server": &server.id,