Dekescordes/spacebar
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix bug allowing any member from kicking any member instance-wide

Browse Source
This commit is contained in:
Madeline 2022-12-05 19:16:40 +11:00
parent 9710d74541
commit b380cf19ba
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/api/routes/guilds/#guild_id/members/#member_id/index.ts
View File

@ -109,10 +109,10 @@ router.put("/", route({}), async (req: Request, res: Response) => {
});
router.delete("/", route({}), async (req: Request, res: Response) => {
const permission = await getPermission(req.user_id);
const rights = await getRights(req.user_id);
const { guild_id, member_id } = req.params;
if (member_id !== "@me" || member_id === req.user_id) {
const permission = await getPermission(req.user_id, guild_id);
const rights = await getRights(req.user_id);
if (member_id === "@me" || member_id === req.user_id) {
// TODO: unless force-joined
rights.hasThrow("SELF_LEAVE_GROUPS");
} else {