misty.cafe/mistykey
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

return assigned permissions from /i endpoint (resolves #657)

Browse source
This commit is contained in:
Hazelnoot 2025-06-21 13:39:25 -04:00
parent 8955d05962
commit 7a6ac302f5
4 changed files with 36 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
packages/backend/src/server/api/ApiCallService.ts
View file

@ -379,6 +379,7 @@ export class ApiCallService implements OnApplicationShutdown {
}
if ((ep.meta.requireModerator || ep.meta.requireAdmin) && (this.meta.rootUserId !== user?.id)) {
// Sync with UserEntityService
const myRoles = user ? await this.roleService.getUserRoles(user) : [];
const isAdmin = myRoles.some(r => r.isAdministrator) && (token?.rank == null || token.rank === 'admin');
const isModerator = myRoles.some(r => r.isAdministrator || r.isModerator) && (token?.rank == null || token.rank === 'admin' || token.rank === 'mod');