Fix default rights sucking, fix patch /guilds/:id/members/:id not checking perm for nick

This commit is contained in:
Madeline
2022-09-24 23:53:30 +10:00
parent ea09ba535e
commit d113f447fd
3 changed files with 45 additions and 33 deletions
@@ -35,7 +35,10 @@ router.patch("/", route({ body: "MemberChangeSchema" }), async (req: Request, re
member.roles = body.roles.map((x) => new Role({ id: x })); // foreign key constraint will fail if role doesn't exist
}
if (body.nick) member.nick = body.nick;
if (body.nick) {
permission.hasThrow(req.user_id == member.user.id ? "CHANGE_NICKNAME" : "MANAGE_NICKNAMES");
member.nick = body.nick;
}
await member.save();