Merge pull request #6 from f-code-club/fix/permission

fix: only moderator allow to add and delete

Author: akagiyuu

src/command/add.rs

@@ -5,7 +5,12 @@ use crate::{Context, Message, database, util};
 
 /// Add one or more candidate IDs to the candidates database from a text file.
 #[tracing::instrument]
-#[poise::command(slash_command, prefix_command, ephemeral)]
+#[poise::command(
+    slash_command,
+    prefix_command,
+    ephemeral,
+    required_permissions = "MANAGE_MESSAGES | MANAGE_THREADS"
+)]
 pub async fn add(
     ctx: Context<'_>,
     #[description = "Text file with candidate IDs (one per line, UTF‑8)"] id: serenity::Attachment,

src/command/delete.rs

@@ -4,11 +4,13 @@ use crate::{Context, Message, database, util};
 
 /// Delete a candidate by ID from the candidates database.
 #[tracing::instrument]
-#[poise::command(slash_command, prefix_command, ephemeral)]
-pub async fn delete(
-    ctx: Context<'_>,
-    #[description = "Candidate ID to delete"] id: String,
-) -> Result<()> {
+#[poise::command(
+    slash_command,
+    prefix_command,
+    ephemeral,
+    required_permissions = "MANAGE_MESSAGES | MANAGE_THREADS"
+)]
+pub async fn delete(ctx: Context<'_>, id: String) -> Result<()> {
     let pool = &ctx.data().pool;
 
     if !util::is_valid_id(&id) {