From acfd2be227efbc9b88d9796ab1d893db54a0137a Mon Sep 17 00:00:00 2001
From: regalijan <r@regalijan.com>
Date: Thu, 19 Oct 2023 16:50:37 -0400
Subject: [PATCH] Oopsie that needs to be an AND check

---
 functions/api/uploads/_middleware.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/functions/api/uploads/_middleware.ts b/functions/api/uploads/_middleware.ts
index 551a2a2..e3109cc 100644
--- a/functions/api/uploads/_middleware.ts
+++ b/functions/api/uploads/_middleware.ts
@@ -2,7 +2,7 @@ export async function onRequest(context: RequestContext) {
   const { current_user: currentUser } = context.data;
 
   if (
-    !(currentUser?.permissions & (1 << 5)) ||
+    !(currentUser?.permissions & (1 << 5)) &&
     !(currentUser?.permissions & (1 << 12))
   )
     return new Response('{"error":"Forbidden"}', {