fix: add missing permission check

2023-08-25 09:16:36 +02:00 · 2023-08-25 09:16:36 +02:00 · 84b0eec069
parent d1ff57b239
commit 84b0eec069
1 changed files with 2 additions and 0 deletions
--- a/lib/actions.ts
+++ b/lib/actions.ts
@ -612,6 +612,8 @@ export async function updateServerOwner(serverId: string, userId: string) {
 }

 export async function addServerMember(serverId: string, userId: string, withEvent: boolean) {
+  await checkPermission("servers/update/add-member", { serverId, userId, withEvent });
+
  const server = await mongo()
    .db("revolt")
    .collection<Server>("servers")