From efbac1cf00fab5fc3e965ac966705f341337e754 Mon Sep 17 00:00:00 2001 From: Regalijan Date: Tue, 20 Feb 2024 16:54:07 -0500 Subject: [PATCH] Remove event self-creation check in middleware --- functions/api/events-team/events/[id]/_middleware.ts | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/functions/api/events-team/events/[id]/_middleware.ts b/functions/api/events-team/events/[id]/_middleware.ts index ab054c2..7ee2be6 100644 --- a/functions/api/events-team/events/[id]/_middleware.ts +++ b/functions/api/events-team/events/[id]/_middleware.ts @@ -14,10 +14,7 @@ export async function onRequest(context: RequestContext) { if (!eventInfo) return jsonError("This event does not exist.", 404); - if ( - eventInfo.created_by !== context.data.current_user.id && - ![1 << 4, 1 << 12].find((p) => context.data.current_user.permissions & p) - ) + if (![1 << 4, 1 << 12].find((p) => context.data.current_user.permissions & p)) return jsonError("You cannot manage this event.", 403); context.data.event = eventInfo;