Allow data team to access user history

2023-10-19 16:50:57 -04:00
parent 88c317c5db
commit 98ef2ede43
2 changed files with 5 additions and 1 deletions
--- a/functions/api/game-bans/[user]/revoke.ts
+++ b/functions/api/game-bans/[user]/revoke.ts
@ -3,6 +3,9 @@ import { insertLogs } from "../../../gcloud.js";
 import { jsonError } from "../../../common.js";

 export async function onRequestPost(context: RequestContext) {
+  if (!(context.data.current_user.permissions & (1 << 5)))
+    return jsonError("Forbidden", 403);
+
  const { ticket_link } = context.data.body;

  if (