oml

Author: sphericle

pointercrate-demonlist-api/src/endpoints/player.rs

@@ -8,12 +8,9 @@ use pointercrate_core_api::{
     response::Response2,
 };
 use pointercrate_demonlist::{
-    error::DemonlistError,
-    player::{
-        claim::{ListedClaim, PatchPlayerClaim, PlayerClaim, PlayerClaimPagination},
-        DatabasePlayer, FullPlayer, PatchPlayer, Player, PlayerPagination, RankedPlayer, RankingPagination,
-    },
-    LIST_HELPER,
+    LIST_HELPER, LIST_MODERATOR, error::DemonlistError, player::{
+        DatabasePlayer, FullPlayer, PatchPlayer, Player, PlayerPagination, RankedPlayer, RankingPagination, claim::{ListedClaim, PatchPlayerClaim, PlayerClaim, PlayerClaimPagination}
+    }
 };
 use pointercrate_user::{auth::ApiToken, MODERATOR};
 use pointercrate_user_api::auth::Auth;
@@ -69,6 +66,7 @@ pub async fn get(player_id: i32, pool: &State<PointercratePool>) -> Result<Tagge
 pub async fn patch(
     player_id: i32, mut auth: Auth<ApiToken>, precondition: Precondition, patch: Json<PatchPlayer>,
 ) -> Result<Tagged<FullPlayer>> {
+    auth.require_permission(LIST_MODERATOR)?;
     let player = Player::by_id(player_id, &mut auth.connection)
         .await?
         .upgrade(&mut auth.connection)