Add user authentication for faculty commands

Author: VehvilainenPooki

src/discordBot/commands/faculty/add_instructors.js

@@ -7,6 +7,11 @@ const { editEphemeral, editErrorEphemeral, sendEphemeral } = require("../../serv
 const { courseAdminRole, facultyRole } = require("../../../../config.json");
 
 const execute = async (interaction, client, models) => {
+  if (!interaction.member.permissions.has("ADMINISTRATOR") && !interaction.member.roles.cache.some(r => r.name === facultyRole)) { // Olisiko parempi tarkistaa tietokannasta eikä discordista?
+    await sendEphemeral(interaction, "You do not have permission to use this command.");
+    return
+  }
+
   await sendEphemeral(interaction, "Adding instructors...");
 
   const courseModel = models.Course;

src/discordBot/commands/faculty/create_channel.js

@@ -6,6 +6,11 @@ const { sendEphemeral, editEphemeral, editErrorEphemeral } = require("../../serv
 const { facultyRole } = require("../../../../config.json");
 
 const execute = async (interaction, client, models) => {
+  if (!interaction.member.permissions.has("ADMINISTRATOR") && !interaction.member.roles.cache.some(r => r.name === facultyRole)) {
+    await sendEphemeral(interaction, "You do not have permission to use this command.");
+    return
+  }
+
   await sendEphemeral(interaction, "Creating text channel...");
 
   const courseModel = models.Course;

src/discordBot/commands/faculty/create_course.js

@@ -8,6 +8,11 @@ const { sendErrorEphemeral, sendEphemeral, editEphemeral } = require("../../serv
 const { facultyRole } = require("../../../../config.json");
 
 const execute = async (interaction, client, models) => {
+if (!interaction.member.permissions.has("ADMINISTRATOR") && !interaction.member.roles.cache.some(r => r.name === facultyRole)) {
+    await sendEphemeral(interaction, "You do not have permission to use this command.");
+    return
+  }
+
   const courseCode = interaction.options.getString("coursecode").replace(/\s/g, "");
   const courseFullName = interaction.options.getString("full_name").trim();
   if (await findCourseFromDbWithFullName(courseFullName, models.Course)) return await sendErrorEphemeral(interaction, "Course fullname must be unique.");

src/discordBot/commands/faculty/create_poll.js

@@ -7,6 +7,10 @@ const { facultyRole } = require("../../../../config.json");
 const numbers = [ "1️⃣", "2️⃣", "3️⃣", "4️⃣", "5️⃣", "6️⃣", "7️⃣", "8️⃣", "9️⃣", "🔟" ];
 
 const execute = async (interaction, client) => {
+  if (!interaction.member.permissions.has("ADMINISTRATOR") && !interaction.member.roles.cache.some(r => r.name === facultyRole)) {
+    await sendEphemeral(interaction, "You do not have permission to use this command.");
+    return
+  }
 
   const guild = client.guild;
   const channel = guild.channels.cache.get(interaction.channelId);

src/discordBot/commands/faculty/delete_bridge.js

@@ -7,6 +7,10 @@ const { sendMessageToTelegram } = require("../../../telegramBot/bridge/service")
 
 
 const execute = async (interaction, client, models) => {
+  if (!interaction.member.permissions.has("ADMINISTRATOR") && !interaction.member.roles.cache.some(r => r.name === facultyRole)) {
+    await sendEphemeral(interaction, "You do not have permission to use this command.");
+    return
+  }
 
   await sendEphemeral(interaction, "Deleting bridge...");
   const Course = models.Course;

src/discordBot/commands/faculty/delete_channel.js

@@ -7,6 +7,11 @@ const { confirmChoice } = require("../../services/confirm");
 const { facultyRole } = require("../../../../config.json");
 
 const execute = async (interaction, client, models) => {
+  if (!interaction.member.permissions.has("ADMINISTRATOR") && !interaction.member.roles.cache.some(r => r.name === facultyRole)) {
+    await sendEphemeral(interaction, "You do not have permission to use this command.");
+    return
+  }
+
   await sendEphemeral(interaction, "Deleting text channel...");
   const channelModel = models.Channel;
   const courseModel = models.Course;

src/discordBot/commands/faculty/disable_bridge.js

@@ -7,6 +7,11 @@ const { confirmChoice } = require("../../services/confirm");
 const { facultyRole } = require("../../../../config.json");
 
 const execute = async (interaction, client, models) => {
+  if (!interaction.member.permissions.has("ADMINISTRATOR") && !interaction.member.roles.cache.some(r => r.name === facultyRole)) {
+    await sendEphemeral(interaction, "You do not have permission to use this command.");
+    return
+  }
+
   await sendEphemeral(interaction, "Disabling the bridge to Telegram...");
 
   const channel = client.guild.channels.cache.get(interaction.channelId);

src/discordBot/commands/faculty/edit_course.js

@@ -66,6 +66,11 @@ const changeCourseNick = async (interaction, client, models, courseName, newValu
 };
 
 const execute = async (interaction, client, models) => {
+  if (!interaction.member.permissions.has("ADMINISTRATOR") && !interaction.member.roles.cache.some(r => r.name === facultyRole)) {
+    await sendEphemeral(interaction, "You do not have permission to use this command.");
+    return
+  }
+
   await sendEphemeral(interaction, "Editing...");
   const guild = client.guild;
   const interactionChannel = guild.channels.cache.get(interaction.channelId);

src/discordBot/commands/faculty/edit_topic.js

@@ -11,6 +11,11 @@ const { facultyRole } = require("../../../../config.json");
 const { saveChannelTopicToDb } = require("../../../db/services/channelService");
 
 const execute = async (interaction, client, models) => {
+  if (!interaction.member.permissions.has("ADMINISTRATOR") && !interaction.member.roles.cache.some(r => r.name === facultyRole)) {
+    await sendEphemeral(interaction, "You do not have permission to use this command.");
+    return
+  }
+
   await sendEphemeral(interaction, "Editing topic...");
   const newTopic = interaction.options.getString("topic").trim();
 

src/discordBot/commands/faculty/enable_bridge.js

@@ -7,6 +7,11 @@ const { confirmChoice } = require("../../services/confirm");
 const { facultyRole } = require("../../../../config.json");
 
 const execute = async (interaction, client, models) => {
+  if (!interaction.member.permissions.has("ADMINISTRATOR") && !interaction.member.roles.cache.some(r => r.name === facultyRole)) {
+    await sendEphemeral(interaction, "You do not have permission to use this command.");
+    return
+  }
+
   await sendEphemeral(interaction, "Enabling the bridge to Telegram...");
 
   const channel = client.guild.channels.cache.get(interaction.channelId);