From 95d0686eaafd7eecde0af0a006ba941611c49c78 Mon Sep 17 00:00:00 2001
From: regalijan <r@regalijan.com>
Date: Thu, 19 Oct 2023 16:49:24 -0400
Subject: [PATCH] Move upload permissions check to middleware

---
 functions/api/uploads/_middleware.ts | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 functions/api/uploads/_middleware.ts

diff --git a/functions/api/uploads/_middleware.ts b/functions/api/uploads/_middleware.ts
new file mode 100644
index 0000000..178b7c8
--- /dev/null
+++ b/functions/api/uploads/_middleware.ts
@@ -0,0 +1,13 @@
+export async function onRequest(context: RequestContext) {
+  const { current_user: currentUser } = context.data;
+
+  if (!(currentUser?.permissions & (1 << 5)))
+    return new Response('{"error":"Forbidden"}', {
+      headers: {
+        "content-type": "application/json",
+      },
+      status: 403,
+    });
+
+  return await context.next();
+}