dandri/server
1
0
Fork 0
mirror of https://github.com/spacebarchat/server.git synced 2026-04-18 23:56:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix bug allowing any member from kicking any member instance-wide

Browse Source
This commit is contained in:
Madeline
2022-12-05 19:16:40 +11:00
parent cf95510eb9
commit b68ac6a54d
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/api/routes/guilds/#guild_id/members/#member_id/index.ts
View File

@@ -109,10 +109,10 @@ router.put("/", route({}), async (req: Request, res: Response) => {
});
router.delete("/", route({}), async (req: Request, res: Response) => {
const permission = await getPermission(req.user_id);
const rights = await getRights(req.user_id);
const { guild_id, member_id } = req.params;
if (member_id !== "@me" || member_id === req.user_id) {
const permission = await getPermission(req.user_id, guild_id);
const rights = await getRights(req.user_id);
if (member_id === "@me" || member_id === req.user_id) {
// TODO: unless force-joined
rights.hasThrow("SELF_LEAVE_GROUPS");
} else {