clans: disallow lower roles from removing higher role members

This commit is contained in:
Spirtix 2025-12-30 14:22:22 +01:00
parent 20308d55e6
commit 9f923e69d8

View File

@ -371,6 +371,9 @@ public class GroupController : Controller {
if (targetRole == null)
return Ok(new RemoveMemberResult { Success = false, Status = RemoveMemberStatus.UserNotAMemberOfTheGroup });
if (targetRole.UserRole >= vikingRole.UserRole)
return Ok(new RemoveMemberResult { Success = false, Status = RemoveMemberStatus.InvalidParameters });
vikingRole.Group.Vikings.Remove(targetRole);
if (!vikingRole.Group.Vikings.Any())
ctx.Groups.Remove(vikingRole.Group);