From a49dc04f5d1bffe4d4ed597d3b2ec3867756f717 Mon Sep 17 00:00:00 2001
From: Jai A <jaiagr+gpg@pm.me>
Date: Sun, 27 Mar 2022 19:14:39 -0700
Subject: [PATCH] Add download set check

---
 src/routes/versions.rs | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/routes/versions.rs b/src/routes/versions.rs
index 840a5263d..b10e416b3 100644
--- a/src/routes/versions.rs
+++ b/src/routes/versions.rs
@@ -450,6 +450,13 @@ pub async fn version_edit(
             }
 
             if let Some(downloads) = &new_version.downloads {
+                if !user.role.is_mod() {
+                    return Err(ApiError::CustomAuthentication(
+                        "You don't have permission to set the downloads of this mod"
+                            .to_string(),
+                    ));
+                }
+
                 sqlx::query!(
                     "
                     UPDATE versions