Oopsie that needs to be an AND check

regalijan · Oct 19, 2023 · acfd2be · acfd2be
1 parent 05a0d19
commit acfd2be
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/functions/api/uploads/_middleware.ts b/functions/api/uploads/_middleware.ts
@@ -2,7 +2,7 @@ export async function onRequest(context: RequestContext) {
   const { current_user: currentUser } = context.data;
 
   if (
-    !(currentUser?.permissions & (1 << 5)) ||
+    !(currentUser?.permissions & (1 << 5)) &&
     !(currentUser?.permissions & (1 << 12))
   )
     return new Response('{"error":"Forbidden"}', {