Appは管理者/モデレータ権限を使えないように

mei23 · Dec 26, 2023 · 7019f26 · 7019f26
1 parent 59b8629
commit 7019f26
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/src/server/api/call.ts b/src/server/api/call.ts
@@ -67,6 +67,14 @@ export default async (endpoint: string, user: IUser | null | undefined, app: IAp
 		});
 	}
 
+	if (app && ep.meta.requireAdmin) {
+		throw new ApiError(accessDenied, { reason: 'Apps cannot use admin privileges.' });
+	}
+
+	if (app && ep.meta.requireModerator) {
+		throw new ApiError(accessDenied, { reason: 'Apps cannot use moderator privileges.' });
+	}
+
 	if (ep.meta.limit) {
 		// Rate limit
 		await limiter(ep, user, ctx?.ip).catch(e => {