Dekescordes/spacebar
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

🎨 [Guild] check if user is allowed to created a guild

Browse Source
This commit is contained in:
Flam3rboy 2021-02-19 15:42:15 +01:00
parent 5e9dea0dd5
commit 00ef8958b9
2 changed files with 15 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
src/routes/api/v8/guilds/index.ts
View File

@ -10,8 +10,6 @@ import {
Snowflake, Snowflake,
getPermission, getPermission,
Guild, Guild,
Member,
PublicMember,
} from "fosscord-server-util"; } from "fosscord-server-util";
import { HTTPError } from "lambert-server"; import { HTTPError } from "lambert-server";
import { check } from "./../../../../util/instanceOf"; import { check } from "./../../../../util/instanceOf";
@ -37,7 +35,6 @@ router.patch("/:id", check(GuildUpdateSchema), async (req: Request, res: Respons
const body = req.body as GuildUpdateSchema; const body = req.body as GuildUpdateSchema;
const guild_id = BigInt(req.params.id); const guild_id = BigInt(req.params.id);
// // TODO: check permission of member
const perms = await getPermission(req.userid, guild_id); const perms = await getPermission(req.userid, guild_id);
if (!perms.has("MANAGE_GUILD")) throw new HTTPError("User is missing the 'MANAGE_GUILD' permission", 401); if (!perms.has("MANAGE_GUILD")) throw new HTTPError("User is missing the 'MANAGE_GUILD' permission", 401);
@ -47,12 +44,13 @@ router.patch("/:id", check(GuildUpdateSchema), async (req: Request, res: Respons
return res.status(204); return res.status(204);
}); });
// // TODO: finish POST route
router.post("/", check(GuildCreateSchema), async (req: Request, res: Response) => { router.post("/", check(GuildCreateSchema), async (req: Request, res: Response) => {
const body = req.body as GuildCreateSchema; const body = req.body as GuildCreateSchema;
// // TODO: check if user is in more than (config max guilds) // TODO: allow organization admins to bypass this
const { maxGuilds } = Config.get().limits.user; // TODO: comprehensive organization wide permission management
if (!Config.get().permissions.user.createGuilds) throw new HTTPError("You are not allowed to create guilds", 401);
const user = await UserModel.findOne( const user = await UserModel.findOne(
{ id: req.userid }, { id: req.userid },
"guilds username discriminator id public_flags avatar" "guilds username discriminator id public_flags avatar"
@ -60,7 +58,7 @@ router.post("/", check(GuildCreateSchema), async (req: Request, res: Response) =
if (!user) throw new HTTPError("User not found", 404); if (!user) throw new HTTPError("User not found", 404);
if (user.guilds.length >= maxGuilds) { if (user.guilds.length >= Config.get().limits.user.maxGuilds) {
throw new HTTPError("User is already in 100 guilds", 403); throw new HTTPError("User is already in 100 guilds", 403);
} }
@ -105,7 +103,6 @@ router.post("/", check(GuildCreateSchema), async (req: Request, res: Response) =
try { try {
await new GuildModel(guild).save(); await new GuildModel(guild).save();
// // TODO: insert default everyone role
await new RoleModel({ await new RoleModel({
id: guildID, id: guildID,
guild_id: guildID, guild_id: guildID,
@ -119,7 +116,6 @@ router.post("/", check(GuildCreateSchema), async (req: Request, res: Response) =
tags: null, tags: null,
}).save(); }).save();
// // TODO: automatically add user to guild
const member = { const member = {
id: req.userid, id: req.userid,
guild_id: guildID, guild_id: guildID,
@ -153,7 +149,6 @@ router.post("/", check(GuildCreateSchema), async (req: Request, res: Response) =
user.guilds.push(guildID.toString()); user.guilds.push(guildID.toString());
await user.save(); await user.save();
// // TODO: emit Event
await emitEvent({ await emitEvent({
event: "GUILD_MEMBER_ADD", event: "GUILD_MEMBER_ADD",
data: { data: {

10
src/util/Config.ts
View File

@ -22,6 +22,11 @@ export interface RateLimit {
} }
export interface DefaultOptions { export interface DefaultOptions {
permissions: {
user: {
createGuilds: boolean;
};
};
limits: { limits: {
user: { user: {
maxGuilds: number; maxGuilds: number;
@ -96,6 +101,11 @@ export interface DefaultOptions {
} }
export const DefaultOptions: DefaultOptions = { export const DefaultOptions: DefaultOptions = {
permissions: {
user: {
createGuilds: true,
},
},
limits: { limits: {
user: { user: {
maxGuilds: 100, maxGuilds: 100,