From 93fa5b2e9a851df3cb45699c43ca79137d51fa15 Mon Sep 17 00:00:00 2001 From: Cadence Ember Date: Fri, 13 Oct 2023 01:07:52 +1300 Subject: [PATCH] Require permissions to change privacy --- discord/discord-command-handler.js | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/discord/discord-command-handler.js b/discord/discord-command-handler.js index f9f07c0..aad06e1 100644 --- a/discord/discord-command-handler.js +++ b/discord/discord-command-handler.js @@ -239,6 +239,15 @@ const commands = [{ }) } + assert(message.member) + const guildPermissions = utils.getPermissions(message.member.roles, guild.roles) + if (guild.owner_id !== message.author.id && !(guildPermissions & BigInt(0x28))) { // MANAGE_GUILD | ADMINISTRATOR + return discord.snow.channel.createMessage(channel.id, { + ...ctx, + content: "You don't have permission to change the privacy level. You need Manage Server or Administrator." + }) + } + db.prepare("UPDATE guild_space SET privacy_level = ? WHERE guild_id = ?").run(level, guild.id) discord.snow.channel.createMessage(channel.id, { ...ctx,