fix: add elevation check to role edit route

2024-04-07 15:52:14 +01:00
parent 54a4eff623
commit aded2e3239
3 changed files with 9 additions and 0 deletions
--- a/crates/delta/src/routes/servers/permissions_set_default.rs
+++ b/crates/delta/src/routes/servers/permissions_set_default.rs
@@ -24,6 +24,7 @@ pub async fn req(
        .throw_permission(db, Permission::ManagePermissions)
        .await?;

+    // Ensure we have permissions to grant these permissions forwards
    permissions
        .throw_permission_value(db, data.permissions)
        .await?;