From 3c9515b867b47b8bc0e09f82333a0c94d628bb51 Mon Sep 17 00:00:00 2001 From: Luna Mendes Date: Wed, 21 Nov 2018 20:32:02 -0300 Subject: [PATCH] channel.pins: add manage_message permission checks --- litecord/blueprints/channel/pins.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/litecord/blueprints/channel/pins.py b/litecord/blueprints/channel/pins.py index 12740eb..8675062 100644 --- a/litecord/blueprints/channel/pins.py +++ b/litecord/blueprints/channel/pins.py @@ -1,7 +1,7 @@ from quart import Blueprint, current_app as app, jsonify from litecord.auth import token_check -from litecord.blueprints.checks import channel_check +from litecord.blueprints.checks import channel_check, channel_perm_check from litecord.snowflake import snowflake_datetime bp = Blueprint('channel_pins', __name__) @@ -37,7 +37,7 @@ async def add_pin(channel_id, message_id): user_id = await token_check() _ctype, guild_id = await channel_check(user_id, channel_id) - # TODO: check MANAGE_MESSAGES permission + await channel_perm_check(user_id, channel_id, 'manage_messages') await app.db.execute(""" INSERT INTO channel_pins (channel_id, message_id) @@ -67,7 +67,7 @@ async def delete_pin(channel_id, message_id): user_id = await token_check() _ctype, guild_id = await channel_check(user_id, channel_id) - # TODO: check MANAGE_MESSAGES permission + await channel_perm_check(user_id, channel_id, 'manage_messages') await app.db.execute(""" DELETE FROM channel_pins