24 lines
650 B
Rust
24 lines
650 B
Rust
use crate::database::*;
|
|
use crate::util::result::{Error, Result};
|
|
|
|
use rocket_contrib::json::JsonValue;
|
|
|
|
// ! FIXME: this is a temporary route while permissions are being worked on.
|
|
|
|
#[get("/<target>/members")]
|
|
pub async fn req(user: User, target: Ref) -> Result<JsonValue> {
|
|
let target = target.fetch_server().await?;
|
|
|
|
let perm = permissions::PermissionCalculator::new(&user)
|
|
.with_server(&target)
|
|
.for_server()
|
|
.await?;
|
|
|
|
if !perm.get_view() {
|
|
Err(Error::MissingPermission)?
|
|
}
|
|
|
|
let members = Server::fetch_members(&target.id).await?;
|
|
Ok(json!(user.fetch_multiple_users(members).await?))
|
|
}
|