Oopsie that needs to be an AND check

2023-10-19 16:50:37 -04:00
parent 05a0d192c3
commit acfd2be227
1 changed files with 1 additions and 1 deletions
--- a/functions/api/uploads/_middleware.ts
+++ b/functions/api/uploads/_middleware.ts
@ -2,7 +2,7 @@ export async function onRequest(context: RequestContext) {
  const { current_user: currentUser } = context.data;

  if (
-    !(currentUser?.permissions & (1 << 5)) ||
+    !(currentUser?.permissions & (1 << 5)) &&
    !(currentUser?.permissions & (1 << 12))
  )
    return new Response('{"error":"Forbidden"}', {