Make note creation

functions/api/game-bans/notes/_middleware.ts

@@ -0,0 +1,8 @@
+import { jsonError } from "../../../common.js";
+
+export async function onRequest(context: RequestContext) {
+  if (!(context.data.current_user?.permissions & (1 << 5)))
+    return jsonError("Forbidden", 403);
+
+  return await context.next();
+}