chore: reduce permissions required to wipe / update badges

lib/actions.ts

@@ -18,6 +18,7 @@ import {
   AccountInfo,
   AccountStrike,
   Bot,
+  Channel,
   File,
   Member,
   Message,
@@ -281,10 +282,7 @@ export async function suspendUser(userId: string) {
   }
 }
 
-export async function updateUserBadges(
+export async function updateUserBadges(userId: string, badges: number) {
-  userId: string,
-  badges: number
-): Promise<{ updatePublished: boolean }> {
   await checkPermission("users/update/badges", userId, { badges });
   await mongo().db("revolt").collection<User>("users").updateOne(
     {
@@ -297,23 +295,22 @@ export async function updateUserBadges(
     }
   );
 
-  try {
+  const memberships = await mongo()
-    const memberships = await fetchMembershipsByUser(userId);
+    .db("revolt")
-    for (const topic of [userId, ...memberships.map((x) => x._id.server)]) {
+    .collection<{ _id: { user: string; server: string } }>("server_members")
-      await publishMessage(topic, {
+    .find({ "_id.user": userId })
-        type: "UserUpdate",
+    .toArray();
-        id: userId,
-        data: {
-          badges,
-        },
-        clear: [],
-      });
-    }
-  } catch (e) {
-    return { updatePublished: false };
-  }
 
-  return { updatePublished: true };
+  for (const topic of [userId, ...memberships.map((x) => x._id.server)]) {
+    await publishMessage(topic, {
+      type: "UserUpdate",
+      id: userId,
+      data: {
+        badges,
+      },
+      clear: [],
+    });
+  }
 }
 
 export async function wipeUser(userId: string, flags = 4) {
@@ -321,16 +318,39 @@ export async function wipeUser(userId: string, flags = 4) {
 
   await checkPermission("users/action/wipe", userId, { flags });
 
+  const user = await mongo()
+    .db("revolt")
+    .collection<User>("users")
+    .findOne({ _id: userId });
+
+  const messages = await mongo()
+    .db("revolt")
+    .collection<Message>("messages")
+    .find({ author: userId }, { sort: { _id: -1 } })
+    .toArray();
+
+  const dms = await mongo()
+    .db("revolt")
+    .collection<Channel>("channels")
+    .find({
+      channel_type: "DirectMessage",
+      recipients: userId,
+    })
+    .toArray();
+
+  const memberships = await mongo()
+    .db("revolt")
+    .collection<{ _id: { user: string; server: string } }>("server_members")
+    .find({ "_id.user": userId })
+    .toArray();
+
   // retrieve messages, dm channels, relationships, server memberships
   const backup = {
     _event: "wipe",
-    user: await fetchUserById(userId),
+    user,
-    messages: await fetchMessages({ author: userId }, undefined),
+    messages,
-    dms: await fetchChannels({
+    dms,
-      channel_type: "DirectMessage",
+    memberships,
-      recipients: userId,
-    }),
-    memberships: await fetchMembershipsByUser(userId),
   };
 
   await writeFile(