velvox
/
litecord
mirror of https://gitlab.com/litecord/litecord.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

guilds: add permission checking on get_guild

This commit is contained in:
Luna Mendes 2018-11-21 20:48:02 -03:00
parent b069295898
commit a974ff34ba
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
litecord/blueprints/guilds.py
View File

@ -12,7 +12,7 @@ from ..schemas import (
validate, GUILD_CREATE, GUILD_UPDATE, SEARCH_CHANNEL validate, GUILD_CREATE, GUILD_UPDATE, SEARCH_CHANNEL
) )
from .channels import channel_ack from .channels import channel_ack
from .checks import guild_check, guild_owner_check from .checks import guild_check, guild_owner_check, guild_perm_check
from litecord.errors import BadRequest from litecord.errors import BadRequest
@ -178,8 +178,8 @@ async def get_guild(guild_id):
async def _update_guild(guild_id): async def _update_guild(guild_id):
user_id = await token_check() user_id = await token_check()
# TODO: check MANAGE_GUILD
await guild_check(user_id, guild_id) await guild_check(user_id, guild_id)
await guild_perm_check(user_id, guild_id, 'manage_guild')
j = validate(await request.get_json(), GUILD_UPDATE) j = validate(await request.get_json(), GUILD_UPDATE)
if 'owner_id' in j: if 'owner_id' in j: