Don't allow non-management to access et member management

This commit is contained in:
2024-03-05 21:37:57 -05:00
parent 730e55ebac
commit 2cd5c7a5b7
2 changed files with 6 additions and 8 deletions

View File

@ -37,11 +37,7 @@ export async function loader({ context }: { context: RequestContext }) {
status: 401,
});
if (
![1 << 3, 1 << 4, 1 << 12].find(
(p) => context.data.current_user.permissions & p,
)
)
if (![1 << 4, 1 << 12].find((p) => context.data.current_user.permissions & p))
throw new Response(null, {
status: 403,
});